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ARMY EXTRUSION COURSES 



Subcourse — Military Cryptanalysis, Part III 
Simple Types of Aperiodic Substitution Systems 



Introduction 



Purpose and Scope ? 

The purpose of this suocourse is to teach the methods of analysis 
of some of the more simple varieties of aperiodic substitution systems. 
To a lessor degree it is intended also to develop the student’s ability 
to ascertain, by cryptanaly tic methods, the genera J system upon which 
a cryptogram that is to be solved is based. 

The scope of the subcourse is: More compj^x types of poly- 

alphabetic. substitution systems; auto-lcey systems; interrupted, variable, 
and non-periodic key systems; systems employing lengthy keying sequences. 

Humber of Lessons and Approximate Time Required ; 

This subcourse consists of 12 lessons each of which will probably 
require approximately 5 hours of work by the average student. 

The time indicated above ic onLy an estimate and should be con- 
sidered merely as a guide. It does not in any way limit the time that 
may be devoted to each lesson or to the subcourso as a whole. No 
further mention of the time required will be made in the lesson assign- 
ments . 

Texts Required : 

Military Cryptanalysis, Part III, Aperiodic Substitution Systems, 
1938, as prepared under the direction of tho Chief Signal Officer. 

Materials Required : 

Since only the usual cross-section paper rnd frequency table forms 
will be required, no further mention of these items will be made in the 
lesson assignments. 

Special Instructions and Informatio n: 

Each lesson assignment has a maximum weight of 100. So far as 
practicable, detailed work sheets which usually form a part of the 
solution should be submitted with the solutions. Thi_y will bo returned 
to the student for file or further study. DO HOT RETURN THE LESSON 
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SHEETS UNLESS WORK IS SHOWN THEREON. In all cases show the primary 
components and keys from which derived. 

It is essential that the student first road the entire text 
before attempting to solve any of the problems. This will give him 
a general background of all the principles and methods covered in 
the subcourse and will materially assist in the solution of the 
specific problems in the various lessons. Of course, further study 
of specific portions of the text will be necessary' but the student 
will have to use his own judgment in this regard. No text assign- 
ment will be indicated as specifically applicable to any lesson . Nor 
will the subject-matter to be covered by each lesson be indicated, as 
is usually the case in these subcourses, the purpose being to give 
the student a little practice in ascertaining, by cryptanalytic 
methods, the cryptographic system involved in a cryptogram to be solved. 
Of course, no lesson contains a problem involving principles beyond 
the scope of this and the preceding two texts in cryptanalysis. 

The student is urged to apply the principles explained in the text 
in solving the problems, even though solutions may be obtained in some 
cases by other means. Only by understanding each principle in turn will 
progressive results be obtained. 

A guiding principle in the solution of any problem should be: 
ALWAYS TRY THE SIMPLEST THING FIRST. 

The text of all messages will be military unless otherwise stated. 



■JBHH'tHBB* 



SUBCOURSE 

IESSON 

Weight : 

15 



LESSON ASSIGNMENT 
Military Cryptanalysis, Part III 
1 



la. Solve the following message: 

R F C E B U Z M U B J\S G II K A P Q II L M Z L S Z D KMMT 

Q D U 0 F Z C P M Z Q R Q G E X 0 G 0 F ZPYWN W 0 C F H 

K K J G X T BGTC (,• D Z Q R 

b. What is the keyword f^r the message? 
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2. Solve the following cryptogram, in which the text has 
been allowed to remain in i bs bonafide word lengths: 

N P M E S £ E V Z AX MPECEIJGQ AN TJOL A R W Y P 

VKVHJJZ 0 D Z L AK VEFHELSBAF IX 

JUXMCENT SBGTFFPBD DELC EQSBEBPVEKE 

EJVJZDJ XTBLEtjEU PZZPSJ FOOD 

RIXXJRXHB TSS K B fl P Z E Z D L Z B N M K Z'HHJ E 

3a. Solve the foi Lowing ci'yi-bogrvu:’ which ore in the same 

key: 

No. i. 
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No. 
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3b. Vfhab relation, if any, con you find betT/een Problem 2 
and 3a? 
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Weight ; 

5 3c - The Toll 1 owing cryptogram was sent later on the some 

day by the same headquarters tha b sent the one given in 
Problem 3_a. Solve it. 

M S 0 W S A E N 

A X K D Q D G X 
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Aim EXTENSION COURSES 

r 

LESSON ASSIGNMENT 

SUBCOURSE - Military Cryptanalysis, Part III. 

LESSON - 2 



CORRECTION 



Problem 5 should read - "The enemy is us in" the word-length keying 
system exemplified in Problem 2, but the primary components are 
differently mixed sequences. The letter Z is employed as word 
• separator. The following message has been^ intercepted. Solve 

it, reconstruct the primary component and the key for the message.” 
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ARMY EXTENSION COURSES 
LESSON ASSIGNMENT 

SUBCOURSE - Military Cryptanalysis, Part III 

LESSON - 2 



Weight : 

30 



1. Accompanying this lesson sheet is a paper entitled 

"Instructions relative to a cryptographic system originated 
by Mr. X." These instructions describe one of the many 
systems submitted to the War Department for consideration 
for military use. The description is in the "inventor's" 
own language and includes one sample message, the key for 
which he gives, and one test messigw concerning which he 
says: "As I alone know the key words of the message below, 

it should prove a good example to tost the efficiency of 

my cipher. " You are to solve his test message. 

2. The following has been enciphered by means of a disk 
similar to the obsolete U.S. Army disk except that both 
primary components are the same mixed sequence, proceeding in 
the same direction. The successive plain-text words are 
enciphered by successive keyletters of a keyword. Solve the 
message, reconstruct the primary component and find the key- 
word for the message. 
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Weight: 



40 



2. Continued: 

1 2 3 4 5 

K. P B M I F HRRHZ Z B C W M IKAVL D J Q X B 

L. SIWTB LYJEE DGVWQ ZLVUU PPNXA 

M. QNLUB IPLMO IZYVT MVGWL JDCWY 

H. NBLGX TYXGK EWEKF UQZDF I 

3. The enemy is using the word-length keying system exempli- 
fied in Problem 2, but the primary components are differently 
mixed sequences, the letter Zp being employed for this purpose. 

The following message has been intercepted. Solve it, reconstruct 
the primary component and tho' key for the message. 



A. YRMLT G C Y J H H P F P F B B A 0 B J S D D A VKVKU 

B. ONNYS F M 1. U T ILTFK VDDGZ QUSKA OYPDV 

C. X K V W N N P W 0 T H I Y U F W B B A M D W W R L G C B M V 

D. 0 A Q P N D P Z G H G H G 0 S T K J H G F I V C Z Y S A E X 

E. XVHMG GXNDL RQTDY JJBKS NUDFP VZDXX 
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‘'INSTRUCTIONS RELATIVE TO A CRYPTOGRAPHIC SYSTEM ORIGINATED BY MR. X" 



! 

Lay out the working form as follows: 

(Material required: pencil, Paper and Dividers.) 

1. On stiff paper, scribe o circle 3 or 4 inches in diameter. 

Divide the circle into 26 equal spaces. 

Letter into these spaces the letters of the alphabet, A to Z, 
pointing the base of the letter toward the center of the circle. 

Inside of the line of letters, number the spaces 1 to 26, 
starting with A. 

Now cut out the circle and lay it aside. 

2. Scribe another circle of same siso, on another piece of paper. 

Divide this into 26 divisions, with the dividing marks on the 

outside of the periphery of the circle. 

Into these spaces letter in the letters arranged in a form 
specified in the following paragraph: 

3. On a scrap of paper, set down the letters of the alphabet. 

Under these letters, set down the prearranged secret key word or 

sentence. (In enciphering the enclosed message, I used GIMPY 
FURBELOW.) 

Cancel out of the full alphabet all of the letters contained in 
the key word. 

No w set down the first letter of the key, and follow it with the 
first letter remaining uncancoiled in the alphabet. Then the 
second letter of the key, followed by the second remaining 
uncancelled letter in the alphabet above. Continue until all 
the letters have been used in both. Example: 

GIMPYFU11BEL0 W 

G A I C M D P H Y J F K U N R Q B S E ! L V 0 X V/ Z 

Now, keeping A near the top, letter into the spaces, from left to 
right, the letters formed by the combination above. (It will be 
found easier to read if the letters are inserted with the bases 
all pointing toward the bottom of the sheet of paper. The sheet 
of paper does not move, as is the case with the circular out-put.) 

You are now ready to start to encipher. 

4. Place cut-out circle on top of circle on sheet, pinning at centers 
so the cut-out will revolve and the respective letters of each circle 
will match up. 

A 

Set the sp8.es 1 on the rotating circle opposite A on the stationary 
circle . 
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Nov/ move the rotating circle (top) to the left as many spaces as the 
date of the month. (In the sample message it is the 6th.) 

Moving the top of the circle to the left progresses up in numbers 
and tov/ard Z in the alphabet. 

A 

This brings us to G, from which point we encipher our first word of 
7 

our sample message, the rotating circle being used for the regular 
word, and the code word being derived from the stationary or outer 
circle . 

When the word is finished, add the code letter for Z. 

Nov/ move tho rotating circle ahead (top to loft) as many spaces as 
there were letters in the word immediately preceding, not including 
the added Z. 

(In dividing cryptographic messages into letter groups of five, the 
addition of the letter Z to cacn word minimizes possibility of error 
in deciphering. Also the words ending in Z are very few, and in ZZ, 
none. If such an ending were encountered in foreign proper names, 
the instances would be so rare as to make tho verification of same 
necessary.) 

A 

In the message dated August 6th. we start at G, and our first word 

7 

KUMPE v/ill encipher BQKFZL. Moving five spaces ahead brings us to 
A 

L, and COLONEL becomes EMAMCLAQ. Grouped into fives, we have DQHFZ 
12 

LEMAM CLAQ etc. Note that E was Z in Kumpe, but is L in Colonel. 

And so the enciphering process continues until the message is com- 
pleted. 

5. DECIPHERING is simply a reversal of the foregoing. 

The receiving operator builds up his daily layout along the identical 
lines employed by the sending operator. 

6. The key word, words or sentence may be made up of a thousand different 
combinations of 13 letters. 

The key word for tomorrow, or next changing date, can also be incor- 
porated in any regular ily ciphered message with safety. 
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SAMPLE MESSAGE 



August 6th, 1930. 

1 2 3 4 5 
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As I alone know the key words of the message below, it should 
prove a good example to test the efficiency of my cipher. Exactly 
following the layout of the other one, and enciphered by employing 
the same system, it may give the "enemy" something to do to decipher 
it. 



1 

A. V F U Y 0 X N 

B. HTBDZ LB 

C. KALTN ZH 

D. JIIIIQ J K 

E. SNHSB II 



TEST MESSAGE 

2 3 

SOW XBLD3 A Q 
Z H K PGWGV IP 
GHS FZVJG EO 
0 V B TWJPI E Q 
UMA QKAPO XH 



August 5th, 1930. 

4 5 

W X V I I P Z Q 
N F J ARXSF 
JUG U S 0 Z B 
PAL SREHM 
LIZ ZCHVM 
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SUBCOURSE - Military Cryptanalysis, Part III 

LESSON - 3 



Weight: 

8 la. So], vo the following cryptogram: 

A X K B Y LBLXK LGBJO BVXQX E R V G E CUCUO 

PHQDQ DYUGX K L V A X KJGDD MDFQR YXEJY 

Z R Z Z D D E R Z Y Z V V P M C JVBZ YU JPL B K M 0 K 

Z P Q 

2 b. What is the keyword and how does it control the shifting 

of the primary components? 



8 %. Solve the following cryptogram: 

XJHFE USRBB ITLRN FYQRY IJSZG GFJZB 

Q W V R Q W C Q R Q J M U J T W R D S I W A M P L 0 L 



2 

30 



b. What is the keyword-and how does it control the shifting 
of the primary components? 

3a. Solve the following cryptogram: 

i 



Z S I I F Q V Z 0 R V S Q Q X 

IECNN FBHCD GRYZA 

% L L Z S I T F Q 7 Z 0 R V S 

C R I II BDTFS YBOCY 

Q V Q W 0 R K U F B M V F B W 

HCRDC NBYTL XAUUIJ 

S Q R 0 Z R P V R II U B D U N 

I D Y C H URRZS DHEBD 

RULUB PZYBO GUVSX 

S D 
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10 b. Having found the primary components, solve the following 

cryptogram which is enciphered according to the same system but 
with a different key. 



C f( I E Q 
U K F Q Z 
Q X B S D 



GEROH 
R V S Q A 
PORVS 



V S Q P V 

V G U U V 
RICHV 



M M 0 X X 
0 P C G D 
IEKYO 



DUHED 
S M J H 0 
E E J B I 



GEEIG 
K J R D 0 



5 c. What are the keys upon which the cryptograms under a 

and b are based and what controls the number of letters enciphered 
by each alphabet? 



30 4§L* The enemy is using the system exemplified by Problem 3a. 

The primary components and the keyword change every day. From 
cryptanalytic work on his previous traffic it has been noted that 
three stations in a certain radio net always begin their messages 
with the enciphered serial number of tho message . (Example; 
NUMBERTWELVEX) The last deciobered messages exchanged 
among these particular stations wore found to begin with the 
serial numbers shown bulow: 



From To Serial 

Station Station No. 

A B 17 

A C 15 

B A 14 

B C 16 



G A 21 

C B 11 



The next day the following were the first cryptograms to be 
intercepted between the stations indicated. Solve the messages, 
ascertain the primary components and the daily keyword . 



From B to A 
U H 0 K B DQFQE 
OIZFC IPHDB 



No. 1 

H U I A U I 0 U M U 
L Z P B I TCABP 



IFSDC OQGCC 
BU1JK XGIUO 



Y 
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From G to A 



No. 2 
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B V V 



DHPO 



No. 3 



From A to C 
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OKB 
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IT 
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M E 


H U 
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U H B 
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lx. 


L G 


J 


L B 


U 


HOT 


H 
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K G 
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0 



5 4b. What principal lesson does this particular problem teach 

you as a cryptographer? As a cryptanalyst? 
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Subcourse — Military Cryptanalysis, Part III, 
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30 la. Solve the beginnings of the 35 messages given in Para- 

graph 20b of the text. A work-sheet ecpy is attached. 



1 b. What is the keyword for the messages? 

3 c,. Indicate the primary components. 



1 



d. What is the interruptor and upon what does it act? 



35 2a. The thirty-five messages just solved were the traffic 

of the eighth of the month. The first message intercepted on the 
ninth is below. Solve the message and determine the key. 

C. 0. 95th Infantry 

JTKFL QJDLF I JRHR PMTOK WAHCB TGDIIH 
LSOSR PKHTI XSDIF LUFRS Z Z S Q V SFQHC 
S H J S B DZOP E W I D M I X G C K X 



30 



Smith, Brigadier General 



3. The following message was intercepted on the tenth of 
the month (the next succeeding day after the message of 2 in 
this lesson). Solve the message and determine the key word. 



P V E S I£ 
Z S Z P D 
H K D H Z 
A P M P X 



W V H B P 
J A V E A 
U Z 0 T Q 
M If Q H H 



Y I R I S 
I E C IV H 
L E U E G 
M L X Q J 



X H II T H 
Y Y I J I 
o E q v. G 
Z Q U R R 



JZKUG 
Z V Q H H 
E U U C X 
R U L L 0 



U G L W Z 
M L A A M 
L J U X Q 
LDPKM 
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M V X S 
7/ V L 3 
H B P L 
N D E V 
X S V U 



V U Q W 0 Q 
H K K D B L 
F ESRBS 
B P G 0 V Q 
E U D K R S 



V E V C H K K 
X 0 H Q H 3 F 
B Q W A B G P 
H H M L R 0 U 



B B U M 0 F 

J J C BUM 

L G H H X T 

R D C D S K 



AS S H G X P 
F D B I K W V 
L D G F Q X V 
U W Q W V N V 
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LESSON 4 - Problem 1 
MESSAGES WORK SHEET. 



(1) 


Z 


c 


T 


r 


z 


w 


Z 


P 


E 


F 


Z 


Q 


X 


(19) 


A 


F 


E 


0 


J 


T 


D 


T 


I 


T 








(2) 


w 


T 


E 


Q 


M 


X 


Z 


S 


Y 


S 


P 


R 


C 


(20) 


K 


P 


V 


F 


Q 


W 


P 


K 


T 


E 


V 






(3) 


T 


C 


R 


VI 


0 


X 


T 


B 


H 


H 








(21) 


Z 


A 


B 


G 


R 


T 


X 


P 


U 


Q 


X 






(4) 


E 


F 


K 


c 


s 


z 


R 


I 


H 


A 








■ (22) 


Y 


H 


E 


0 


C 


U 


H 


M 


D 


T 








(5) 


y 


A 


N 


c 


I 


H 


Z 


N 


U 


W 








(23) 


C 


L 


C 


P 


Z 


I 


K 


0 


T 


H 








(6) 


V 


Z 


I 


E 


T 


I 


R 


R 


G 


X 








(24) 


A 


F 


L 


W 


IV 


Z 


Q 


M 


D 


T 








(7) 


H 


C 


Q 


I 


C 


K 


G 


U 


0 


N 








(25) 


*7 

cJ 


C 


V 


A 


p 


M 


B 


S 


A 


W 


L 






(8) 


z 


C 


F 


c 


L 


X 


R 


K 


Q 


If 








( 26 ) 


H 


F 


L 


M 


H 


R 


Z 


N 


A 


P 


E 


C 


E I 


(9) 


K 


w 


Tii 


p 


T 


E 


VI 


C 


I 


M 


J 


S 




(27) 


C 


L 


r 7 

JLt 


G 


E 


M 


K 


Z 


T 


0 








(10) 


E 


p 


D 


0 


Z 


C 


L 


I 


K 


r 

VJ 


J 






(28) 


T 


P 


Y 


F 


K 


0 


T 


I 


• 

Z 


U 


II 






(11) 


w 


T 


S 


s 


Q 


Z 


P 


Z 


I 


E 


T 






(29) 


Z 


G 


C 


P 


S 


N 


E 


0 


P 


H 


D 


Y 


L 


(12) 


z 


C 


G 


G 


Y 


F 


C 


s 


B 


G 








(30) 


c 


I 


JL 


G 


I 


F 


T 


s 


Y 


T 


L 


E 




(13) 


c 


W 


Z 


A 


0 


0 


E 


M 


H 


17 


T 


F 




(31) 


T 

X 


T 


Q 


V 


v; 


V 


D 


G 


H 


P 


G 


U 


Z 


(14) 


c 


I 


Y 


G 


I 


F 


B 


D 


T 


V 


X 






(32) 


N 


0 


C 


A 


i 


F 


B 


J 


B 


L 


G 


H 


Y 


(15) 


E 


A 


Q 


D 


R 


D 


N 


S 


R 


G 


A 


P 


D T 


(33) 


X 


X 


X 


E 


L 


F 


E 


G 


J 


L 








(16) 


Y 


F 


W 


C 


Q 


Q 


B 


Z 


C 


W 


G 






(34) 


Z 


C 


T 


U 


M 


B 


Z 


J 


0 


0 








(17) 


w 


T 


E 


Z 


Q 


S 


K 


U 


11 


c 








(35) 


H 


C 


Q 


I 


VI 


3 


Y 


S 


B 


P 


H 


C 


Z V 


(18) 


z 


C 


V 


X 


Q 


Z 


K 


z 


Y 


D 


W 


L 


K 
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10 1. Solve the following; 

KGGLN GSAEZ 0 K K T A 3 H J S E D Y Q Z V E A L X G 

HJGFB I M I E R F M D P R P I 0 X V 0 0 B Y X X G V H L 

G P B P W A" M T M E HU W D P W P Y U Q Q E 

NOTE; ADDITIONAL MESSAGES, IF FOUND NECESSARY, WILL BE GIVEN UPON 

REQUEST. 



30 2. The following are the beginnings of 45 military-text 

messages. Solve them, reconstruct the primary components, and 
■briefly describe the system of encipherment employed. Submit 
the beginnings of the first 5 messages only. 

1. SCOPA KFBUC GIMJV 

2. KHTGM GYHKG QGNIC 

3. SRLEN TRCTR ARUBW 

4. V L R E N MLCT J D Q E X 0 

5. LZVSI EOOAT GUNVT 

6. H Y L V D A 0 T E X W V T A I 

7. Y 0 Q N M P D Q B Q Y I Z U A 

8. Z 0 W K X R K I V R V/ KKC J 

9. CGUQV RBHOS SXOXR 

10. S R R K M A L 17 Z J A K K M X 

11. C A U E J Q T L E Z TDJEO 

12. C Y U Q N C H A X X U N R F A 
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13. 


U 0 I s v 


R 0 J K E 


J B R H I 




14. 


NRIG! 


U W Z P A 


H Z C D T 




15. 


I0KER 


H N S G Z 


0 B A C N 




16. 


OITIR 


D G C N E 


JQHNG 




37. 


VBLSQ 


Z B D J Q 


I K P Z V 




18. 


THNPR 


B 0 E F L 


II X 8 M K 




19. 


0 Y U X I 


E B W B E 


L J I M S 




20. 


S R L M R 


QFYTS 


V V I T Q 




21. 


M H T C Y 


D G Y Y J 


V V E B Z 


• 


22. 


C M W E X 


E R 0 X H 


Q V V I T 




23. 


SREIE 


DKQ T V 


Vf S Tj X K 




24. 


NORSG 


J I VJ I W 


M I 7, w v; 




25. 


I I B U M 


N I X Y W 


V D H E Z 




26 . 


W T T G Y 


CILMR 


U I Y W B 




27. 


C W J Y I 


II H J 0 I 


A T P G T 




28. 


Y 0 P X I 


Q K A Q R 


W ARAB 




29. 


C M W Q G 


H Q A J F 


N Z R Z F 


• 


30. 


F T W Q G 


R C E N B 


F Z E E F 




31. 


T 0 T I F 


Z T H U Y 


R S 0 17 J 




32. 


E Z V V7 N 


K P V 0 W 


KRLC R 




33. 


T Z li R D 


G T K 0 W 


TLKGZ 




34. 


V B L S G 


K N J U 0 


B U P X B 




35. 


U Z B N I 


KBFUI 


0 Z R D M 




36. 


E Z K V F 


W G G E G 


OBIQK 




37. 


W R L 17 B 


H N P U U 


L A U H Y 
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38. 

39. 

40. 

41. 



42. 

43. 
44« 
45. 



D 0 R K F 
Z A I G R 
CS JEH 
E H U E V 

0 Y B E X 

1 0 T K I 
Z L P Y V 
Y H U Q Y 



H K H I F 
KQO 0 Y,' 
YMZXD 
S E H E H 
D 0 A Y X 
T T K C P 
C E D J S 
H N P Z E 



M D H M J 
0 L I A W 
X M U X T 

q x w i v 

F Z W U L 
D A T H D 
K E S S H 

w a a c i 



50 3. Solve the following messages, which are all enciphered 

by the same primary components. 



1 



2 



•3 

J 



4 



5 



A. T R S r W G h X 

B. LILLY DXZ 

C. BPYMV ZBQ 

D. P X Y G W C V L 

E. HJAUP U N S 

F. BAUVG HPT 



I. 

ax gjcxz i 

z r u A m h z x 

B B F TJ V V A S 

J a Z J A Q A W 

D L C L J A D K 

F U IK K II M X 



BLTK EVVLX 
LNCQ J T X Y L 
F S B K V S P P M 
C R N D DCCIM 
X X H G F Z C U S 
G E X X 



G. Z S 0 P 

H. W X Y L 

J. X D B Q 

K. S R Mil 

L. J J IC 8 



P R R Y N 

b p V/ G 

U T Q U J 

J OFQfl 
H 3 H Q X 



II. 

P GDUN 
G BUG 
ij D 7 P W 
R FRRM 
E A K K II 



S HEAL 
D V A B M 

Y7 N G M H 

rf HE IG 

N Y M II B 



I P P Q II D 

Yf D C G Y D 

Q S S F S K 

J M H Y E G 

X 
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III. 










A. 


H N F D R 


E R R z r 


S X X Z P 


r ]j J Q U 


E F 


I X K 




B. 


H J F Q X 


Z N T B T 


B M \7 S K 


C Y B S K 


0 N 


E 0 R 




C. 


RNKED 


H R Y E E 


IV. 






• 




B. 


ZJD03 


iINDK W 


G Y G L C 


B S K 0 X 


H J 


Y B E 




E. 


G II G G U 


DLIIP 


U Z K E T 


T Z B G A 


A A 


PPG 




F. 


F V E T J 


Y N S K M 


E J V P I 


X P W D C 


W X 


XXX 










V. 








• 


G. 


TKKLS 


GDC W G 


D 0 F V A 


TJ T V S D 


S 0 


B G H 




H. 


HCMSV 


E V V S X 


P V W P R 


G G L R R 


E 0 


\i S Q 










VI. 










J. 


JUZTC 


C G II G G 


ALIRG 


GTIIP t; 


J T 


F I Z 




K. 


CFFZI 


B L Q Z D 


U P U V V 


V H C B G 


B B 


FMS 




La 


C C T B F 


M X X X X 


VII. 










M. 


V V W J K 


SRLKS 


F R Z I, F 


G W E A Q 


X C 


T S 0 


• 


H. 


V I B L I 


Y Y X X X 


VIII. 










0 . 


SEPBO 


Z II N V D 


Y E H II B 


CRRNK 


A C 


Y F U 




P. 


P R K C I 


I R K E T 


T Y I X X 
















IX. 










Q. 


E I H T X 


G L R Q Z 


S S A C B 


X T T L C 


R F 


U V X 




R. 


G L Z L R 


K M V P X 


T Z J F X 


MQSFU 


A P 


E I E 




S. 


E H N G T 


E E D Z J 


DSDDK 


W P V 0 M 


M J 


J X X 
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A. 

B. 

C. 



L I III T 
A 0 Z T U 
J A Q J X 



Q I E A P 
N N S D Q 
E G K A B 



X. 

Q Q E A 0 
X E G H J 
E E X X X 

XI. 



L L L I Y 
POKVZ 



U U H X X 
TO YHQ 



D. 

E. 



UBHZ L 
Y H H P P 



YKVNO 

I 

G G L Y Q 



K X C A T 
J X It' J 



0 Y K S B 
T XEGH 



X D R N G 
A B E E A 



F. Q L F F 7 V W P U Z K K XXX 

10 4. The following message was intercepted on the same day 

as that on which those in Problem 3 were intercepted. This 
message uses an introductory key of unknown length (but is of 
several letters) . Solve the cryptogram. 

NUUBK OCR VS QIFXY MPA IQ GBMRT 



SPYCJ VESFO 
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10 1. Solve the following message: 

X X I Y N LYBSL N X Y Y H BXETI V q Z F N XAMZT 
Z Q D Q L D B -L E U D M L S H Z F J T Y V A .F N Z1 
80 2. Solve the following message: 

12 3 4 5 6 

A. NCEIS G Y S U X JXCHJ IIHIB I E K V D EAIJR 

B. LVZGJ D X Y H q RMHGH YZCNG KDJCS LIEIB 

C. I H K T C X 0 A Y Y JDZYP CPC-CZ B F Y B B SKOAG 

D. ICJKV H Q R M H NWUGJ ZFBBT DJZBT JBEOZ 

E. CCXSU L F P X Y QPEXR 0 f T C B EYBBR XEERC 

F. IGTCY GPOLH C D E B U OPHEY GPKOQ YJBBR 

G. XAEWM W Y B q F SOCBY CZNEJ X F C B J YBBRX 

H. EAEJR RGPJZ JELVH 3? C G Y G CEYBR ZYTCP 

I. EHJTM BDJZM HUM EE DBS? J LEZGS DHZJK 

J. OAPPI ECXSG MHQZY HFNDJ ZMHUT JBJFX 

K. CXWWD DqQ,WL FYTVD ICVNG XCRVL SIKOC 

L. AJKLP q R E X X EilLAE WSIBO FFCTC XSURL 

M. HCDEB UFHZN HFGKq BDJZM HSREK ZHCYJ 

N. I F H M q LHGJR EBYqP JECZN EJKFC BFVBB 

O. SKOAY AHEOD HOOFH GMISC ZNEJU GCZBF 
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1 2 3 4 5 6 

A, VBBXD JZMHF S T J Y T ZDVEK Y B R q Q A G C Z 1 

B. P D S 0 A X B E C R YVEJC V V q L S KBSKO H X Y P W 

3. The following message was the reply to that in Problem 2. 
Solve it. 

VALLB AYPJX AH10D HOOFH GMISE B H q X D 
HCVPV THTPR YJ 



Military Cryptanalysis, Part III, 6-p.2, 1938 











REF ID : A60198 














ARMY EXTENSION COURSES 
LESSON ASSIGNMENT SHEET 








SUBCOORSE 




mm 


Military Cryptanalysis 


, Part III 








LESSON 




- 


7 












Weight : 


















40 la. The following represent the beginnings 

enciphered by means of the obsolete U. S. Army 
key. All the messages begin at the same point 
the first two groups of each message. 


of 20 cryptograms 
disk with a running 
in the key. Solve 






1. 


B 


1 

K G W H 


2 

E Z L S I 


3 

F Q P S S 


4 

GYKXS 








8. 


Z 


0 C A G 


E K A A B 


II N D M Z 


PMivir 






• 


3. 


D 


X Y C P 


E J L E R 


H N K G E 


Z I Z D K 








4. 


0 


B I S V 


G M J S I 


Q G M E Z 


C N D W G 








5. 


B 


K X Q C 


P M T H R 


H M H E H 


A T K W R 








6. 


Z 


H V A P 


H M L Z T 


W W N R A 


F W G B F 








7. 


0 


0 K X B 


EKLEC 


FQPSS 


G Y K X 0 








8. 


B 


K W K P 


QT TEE 


H L T Q F 


F W K B G 








9. 


HXIMM 


PVQEE 


P I T T H 


C X Z D K 








10. 


W H I R X 


A B T W P 


G A K A H 


L X T K H 






• 


11. 


A 


K Z B C 


E I R N F 


Q C X S 0 


G I W 0 R 




• 




12. 


A 


K R A G 


FEZ KP 


W B B N Z 


L Q D K T 








13. 


B 


K G K I 


I7QRB 


D N G E Z 


L N B S C 








14. 


Z 


H?qz 


CPQYA 


0 X X R K 


N U 7 0 Z 








15. 


B 


K H A C 


EZ C 07 


TKXNS 


Q T A B W 








16. 


B 


K U A C 


N I E G H 


OTLK 


F 0 S G Z 








17. 


D 


X I P T 


R I L E T 


0 L B C I 


T I A B G 
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12 3 4 

18. OBTWC ELNKN HBXMZ TWJHK 

19. BKXQC POQYC SQJWZ LHBf K 

20. A K R A C IBPSA QQQMB PMAXR 

b. What are the first 15 letters of the running-key text? 

2. The following was enciphered by the same means as above, 
with a different running key. The running key is presumed to 
have been taken from an ordinary book in English. Circumstances 
surrounding the transmission of the message suggest the presence 
of one of the words BATTALION, BAGGAGE, and UNLOAD in the plain 
text. Solve the message and reconstruct the running key. 

1 2 3 4 5 

A. QASOD PKASH LZEHA YCTQL RQQJX 

B. OMEQK PUSBM AKYLP OWYVD JFHTO 

C. EKDHB EINPD VWPKO LWAEN AEPGA 

D. TAMZC PISCX HPBGK WTAOA RZBDR 

E. E H A R H 
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100 


1, Solve the following messages, all intercepted 
same date* Prisoners state that the enemy is using a 
machine, hut nothing is known ahoub its operation. 


on the 
cipher 










MESSAGE NO. 1 










R X 0 W Z 


U Z U L I 


X T 0 G D 


F C J T G 


FMKLR 




• 




R E A V H 


J V S M A 


Y T I Z G 


A A F W G 


E H N C C 






A C Y A E 


E D G P A 


I J N Q F 


T G T X L 


K Y B E 0 








H J Q Q S 


D P P K G 


II U N R S 


UQIRK 


M 0 U P J 








MCTYV 


W 0 T X D 


S C X C K 


X C P R A 


C X X X X 












MESSAGE NO. 2 










I W K I X 


YOKCP 


S 0 N S F 


H S R F V 


0 N Z K U 








IDYAZ 


M Z H N C 


C A C Y A 
















MESSAGE NO. 3 






• 




W L W T L 


0 H C H N 


M Q R Y 0 


HDXJY 


J C- U V G 






Q C J S I 


0 0 Z D V 


V M B M Y 


D A S X H 


Y C Q 0 M 








L 0 T W R 


C E U Z N 


V C N T P 


Y Q N J H 


T T Z K N 








QGMSW 


R V P W R 


F W GAN 


C R D C T 


C J T G F 








PONMQ 


D E M B V 


D Z K Y N 


NET CC 


A H I H Y 








ZPONL 


0 Y T D G 


WE G A G 


0 I S G Q 


D 0 H S T 








I J L I F 


N N R W S 


IFQJI 


J J Z K U 


D T W E W 








P X Z U A 


QJA JS 


I 0 C R F 


K V M B M 


M I V K B 
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AFX 
Z Z X 
F S D 
N E I 
GEF 

R U J 
H G W 

B H A 
S G D 
B Y U 
A R U 
K X C 

X Q V 
0 Z S 
W W 0 
P M X 

P G S 
E D X 
TIT 



El J N H I Z 

Y H ECFFI 
P G L I E Q A 
H K B P D K-V 
F D F W B U A 

J N G 0 T F E 
R Y T I C T V 

EX X H E L U 
X P 0 N B J L 
HT Z U T G R 

V J V C P 0 P 
L V 

HM Q R Y D A 
MX C L A I W 
X K T K Z S Y 
E S SLKOD 

A W 0 G T I Q 
S W A G I K U 
X Q U H K Z E 



MESSAGE N0« 5 
S Y 0 Z H N F 
I Q D G D EG 
T Z X 0 V D Z 
A V M P S P F 
V M J R I L 0 
MESSAGE NO. 4 
I I H Q J PC 
F X J T U M D 
MESSAGE NO. 5 
0 A R B Z Z R 
C S T J W G N 
G C S J Y X M 
NQFXT R X 

MESSAGE NO. 6 
B H K L Y M D 
X A V B S HA 
IYQCD P X 
0 B T Y F FN 
MESSAGE NO. 7 
GBC GY I L 
D T TiT T I J J 
RQIEH T J 



(Continued) 

GZZ MYAXT 
PGM TAOBY 
IPL KICVP 
IiZR WKISC 
PDP XOXFX 

CGQ WZSED 
A R H 

BPF WZIAU 
DHG GSGLP 
NFZ HPLIZ 
SPX GSCXC 

GQY OHS Y Q 
CMC SHKTC 
QSV CAORX 
F G A A N A T N 

PHF HVILG 
TPK CXHKI 
BXK U F X X X 
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ZUNXW KZTGC TWFDE KKIOL FTZTS 

ouxsx 
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85 1. The following three cryptograms have been enciphered 

by a cipher machine employing two primary components which are 
shifted according to a very long keying sequence. Each 
message starts at a different point in the keying sequence. 

For purposes of simplification, it will be stated that the start- 
ing points of Messages No. 2 and 3 are not more than 10 intervals 
f onward or behind the starting point of Message No. 1. Find the 
proper points of super imposition of these cryptograms and show 
the actual and expected number of coincidences for the various 
super impositions you try, using diagrams such as those given in 
the text and specifying in each test the messages and superimposi- 
tion points involved. 



No. 1 



K D G I 0 JTPLO SKWAP HUCBC JYMCS V L W A H 



V Z C Q U 
X U M T L 
M B Z V V 
N N S C J 
Z P Q Q V 
U B H D A 
DHHAT 

V T M J N 
L R J F P 
D N G F C 
N Z Y Z P 
0 P N M M 



H 0 D C C 
HGfAH 
C A U S Y 
Z N Z C G 
X N R B X 
W WW K I 
J G G X J 
G W H Z X 
Y R T M M 
W J R W C 
Z S J E Y 
A Q I E D 



R P N T X 
N P W Q J 
Q S I X Q 
C K 0 R P 
S J A G A 
K F I E B 
Y U Z Z 
G L 0 U 0 
Q T G Y C 
Q C A P C 
PZITL 
L W J H D 



N A D I H 
P N T 0 M 

0 P M U X 
Z U B S N 
A A U G A 
G N F F E 
G A H K K 

1 U Y M J 
BAEEY 
S I E A S 
R K Q 0 U 
X T J H J 



M J X K P 
F Z T A I 
X X U N T 
T Y E Q L 

Y W B D G 
0 0 0 I L 
U P J T U 
W V I E X 
C E K T Q 
S X J L A 

Y W Y P 0 
Z I 0 D Y 



P X C 0 T 
F B J D H 
FFKYT 
N Z E W D 
C Z F G M 
Q L X E D 
K X Y F D 
P U G G C 
V N X 0 S 
L L B J J 
OHIHE 
S T D E I 
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2. The primary components involved in the three cryptograms 
of Problem 1 are reversed standard alphabets. Solve the first 
few groups in each message. The text is strictly military and 
may be expected to contain such words as ARTILLERY, BATTALION, 
BRIGADE, etc. 
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Weight t 

40 la.. Of the following 10 frequency distributions the majority 

are monoalphabetic. Find them and indicate your answer by plac- 
ing a check mark in the appropriate place in the diagram below. 
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b. Using the X-test, answer the following questions, show- 
ing the results of your calculations and presenting a summary of 
the reasoning which lead to your conclusions: 

5 (l) "Which distributions are monoalphabetic and which 

are not? 

5 (2) How many different cipher alphabets are there in 

the distributions classified as monoalphabetic? 

(3) Allocate the distributions to their respective 
cipher alphabets. 
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85 1. The enemy is using a cipher disk similar to the obsolete 

U. S. Army cipher disk but with two differently-mixed primary 
components which are changed every day. The method of using the 
device is to set the two sequences according to a prearranged 
initial position and step the revolvable disk one letter forward 
in a clockwise direction after the encipherment of every letter. 
The following message was intercepted at 8:00 P.M. and was the 
first message of a new day's traffic . Solve the message showing 
the solution of the first 25 letters of the message only. 
Reconstruct the primary components, determine the keywords upon 
which they are based and their initial juxtaposition. 

NOTE; When you have decided how to go about solving 
this problem, open the accompanying envolope. 
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1 


The foregoing 


message 


was one of 


many 


transmitted by 







enemy stations from 7s00 P.M. until 11:30 P.11,, 10 June. The.' at 
11:45 P.M., 10 June, the message labeled No. 1 below was inLer- 



oepted, after which all enemy stations were silent until 4:00 A.M. , 
11 June, when the single short message labeled No. 2 below was 
intercepted. Solve these two messages: 

No. 1 



A G S U H 
S I T L 0 
NEAffI 
MJKP J 



HPECS 
X W Q H M 
SFHHG 
0 D F 



L:45 P.M., 
A R A A K 
ADHDI 
0 D H N L 



10 Juno. 

0 I Y E B 
E L II S X 
D L E 0 0 



L T Y H D 
DUXZZ 
QIJCEX 



R S A R K 
MGGVK 
X Y L F Y 



No. 2 



4:00 A.M., 11 June. 

BBIXJ NYLTG C Q Y V 0 UPKCA 

5. What important principle of cryptographic security does 
Problem 2 teach? 
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PROBLEM 11 - CRYPTANALYSIS III 
FREQUENCY DISTRIBUTION TABLE 

6 7 8 9 ]D 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 



a MHHBBHHHBHl 
■BBBBBBBBBI 

I Hbbbbbbbbh 

QBBB 
□BOB 



2 2 
2 0 



Q 
R 
S 
T 
U 

V 

V 

X 0 



0 27 

[T 2 * 

4 20 
~p29 

iX 29 

1 25 

T 24 

1 28 

5 29 

rr 32 



2111 _2_°_L. :L01 1 0 0 1 _4_ 0 0 1 0 1 2 _4 0_ 2 

10030003003000 1 1 22110040 

006003101130040242000230 

Letters Arranged 



0 |31 
^ol25 

3 28 

2 33 

0 26 

ll_ 18 

0 24 
0 24 
_ 0 _ 32 
68l‘ 
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ARMY EXTENSION COURSES 
LESSON ASSIGNMENT SHEET 



SUBCOTJRSE 
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LESSON - 12 



DETAILS OP SYSTEM 

The enemy is using a cipher system (possibly a machine) 
concerning which the following information has been deduced 
from cryptanalytic work* 

a. In general the system is like an ordinary repeating- 
key cipher. It uses two differently -mixed primary components 
which slide against each other to produce a set of 26 secondary 
cipher alphabets. (The primary components are derived from 
key-words, by key-number transposition, and the keywords change 
monthly.) 

la. Each radio net is daily assigned a different message- 
keyword for enciphering messages within the net. These key- 
words vary from 5 to 20 letters in length; their composition 
determines the specific secondary alphabets to be used in 
enciphering messages. 

_c. The encipherment of a message can start with any 
one of the letters of the message -keyword, there being an 
indicator in each message which tells the recipient with which 
letter of the key the message begins. The indicator is usually 
the 1st group in the text and the meaning of every indicator is 
known. The indicator AMASS, for example, means that the 1st 
letter of the message is enciphered by the 1st letter of the 
keyword. The complete list of indicators and their values, is 
as follows i 

Letter of keyword with which encipherment 



Indicator 


of message c< 


AMASS 


1st 


AMITY 


2nd 


ARROW 


3rd 


ASSAY 


4th 


AURAL 


5th 


AVAST 


6th 


AXIOM 


7th 


AZTEC 


8th 


BRICK 


9th 


BROIL 


10th 


BROOD 


11th 
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Letter of keyword with which encipherment 
Indicator of message commences 



BRUTE 12th 

BUGGY 13th 

BUGLE 14th 

BUMPS 15th 

BURLY 16th 

BUSHY 17th 

BUXOM 18th 

CABIN 19th 

CALYX 20th 



d. After this initial appearance of the keyword (either 
in whole or in part) , each subsequent cycle of this key uses 
the same set of cipher alphabets but in a different order. 

That is, the order varies from cycle to cycle and does not re- 
peat for a long time. For example, suppose that on a certain 
day the keyword for messages originating at Station A is HARVEST, 
a 7- letter word. A certain message begins with an indicator 
that shows that the initial key-letter employed is the R. The 
sequence of alphabets for the initial cycle is therefore 
R-V-E-S-T. For the second cycle the order of use of the 7 
alphabets might be T-A-V-H-R-S-Ej for the third cycle it might 
be V-H-S-A-R-E-T, and so on. In this case there are 8i 
(8x7x6x5x4x3x2xl - 40,320) different arrangements or orders 
possible. Just what determines which arrangement will be used, 
that is, the sequence of orders is unknown. It seems to be 
governed by a long and complex key. 



******** *************** 



1. On a certain day 25 messages were exchanged by the radio 
stations within one of the radio nets of a certain division. The 
beginnings of these messages follow. Solve the first three 
groups of each message and reconstruct the primary components. 
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2. What is the message keyword for this unit? 

3. What are the keywords from which the primary components 
are derived? 
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Aperiodic keying by word lengths. 



Weight ; 

15 la. Solution is obtainable by finding the plain- 

component equivalents (reversed standard sequence set 
against the normal sequence) and then completing the plain- 
component sequences. Each plain-text word comes out on a 
single generatrix but the successive words reappear on 
different generatrices . The letter-for-let tor decipherment; 
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5 b. Keyword: TUESDAY 

30 2. Since the cipher text is grouped according to the 

original word lengths, idioraorphic words such as ATTACK, FIFTEEN, 
etc., can readily be spotted. Assuming a mixed cipher com- 
ponent sliding against J - he normal plain component, and applying 
the principles of direct symmetry of position in the recon- 



S' 


truction of the 
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obtained 


as follows: 
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2. Continued: 

N T PE 

DEFENSE HAMPERED ATTACK STOP 
EJVJZDJ XTBLRQEU PZLPSJ F S 0 D 

R M A N 

AIRPLANES NOW BEING DECONTAMINATED 
RIYKJRXHB TNK KBCPZ EJULZRNMKZNRJE 

The primary components are as follows: 

Plain; A B C D E F G H I J K L M N 0 P Q R S T U V W X Y Z 
Gipher: XaKWYBMZLCQODRP F j? HGTNIUEJV 

The mixed component is derived by transcribing the columns 
(from left to right) of a simple transposition rectangle based 
upon the keyword XYLOPHONE. Thus: 

XYLOPHNE 
ABCDFGIJ 
KMQBCTUV 
W Z 



Sequence: X A K W Y B M Z L C Q etc. 

40 3a. In Message No. 1 the sequence LBZRSSIBG is repeated 

in Message No. 2. Thi3 idiomorph suggests the word ARTILLERY. 
Immediately preceding this sequence in No. 2 is the sequence 
WGWHP, which is isomorphic with the sequence PMPBN which 
precedes the LBZRSSIBG sequence in No. 1. The word ENEMY 
suggests . itself . With these words and sequences as a start, 
the reconstruction of the primary mixed cipher component is 
not difficult. The letter -for-letter decipherments are as 
follows: 

No. 1 

£ LI D E R 

ATTACK BEGAN THIS MORNING AT ZERO 
E I I S A J C I 0 L A ESXV Z J G E W E A E A D X T V 
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Continued: 
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The keyword for the message is SLIDERULE and the primary com- 
ponents are as follows: 

Plain: ABCDEFGHIJKLHNOPQRSTUVWXYZ 

Cipher: EJVHC-TLCQNIUODRPFSXAKWYBMZ 
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5 3b. Noting that the cipher component shows sections 

identical with sections an the cipher component of Problem 2, 
it is possible to block off the identical sections. Thus; 

For No. i; 
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For No. 2: 
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It soon becomes obvious that the- cipher component for No. 2 
is based upon the same keyword and rectangle as the cipher com- 
ponent for No. 1, but tilt columns in the transposition rect- 
angle have been transcribed in key number order. Thus: 

7835 1 241 
XytOPHBL 
ABCDFGIJ 
KMQK8TUV 
W Z 

Sequence: EJVHGTL’CQ etb. 

5 c. Having reconstructed the mixed cipher component, the 

solution of a subsequent message enciphered by the same com- 
ponents but in a different key is a simple matter. Converting 
the first few cipher letters into their p3ain-comp _ nent 
equivalents and then completing the plain-component, sequences, 
the solution Ls as follows: 
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ARMY EXTENSION COURSES 
SOLUTIONS 



SUBCOURSE - 



Military- Cryptanalysis, Part III 



LESSON 2 



Aperiodic keying by word lengths, continued. 



height; _ 

30 1. This problem is no different in principle from that in 

Problem 3a of Lesson I, but was introduced in order to give the 
student an opportunity to take what appears to be a complex 
scheme of encipherment and remove the extraneous "trimmings" which 
cryptographic inventors usually employ with the idea that these 
additional elements impart cryptographic security to their scheme. 
The solution of the "challenge" message is as follows: 
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The primary 


cipher component 


is based 


upon the phrase A FROWZY 




PHLEGM and the components are as follows: 






Plain: 
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Cipher: 
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30 2a. The moan length of words in English telegraphic text is 

5.2 letters. When separators are used the mean length becomes 6.2. 
Since a keyword is used in this case, then if we should find a 
repetition of significant length the interval between its 1st and 
2nd appearances should give a fair indication of the length of the 
key. 
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key. For example, note the sequence PBUVGI repeated at an 
interval of 44 letters. If the mean word length is 6 it follows’ 
that the keyword in this case should be 7 or 8 letters in length. 
Nov/, since the repeated sequence PBUVGI seems about in the 
middle of the message, if the text is written out in lines of about 
45 to 50 letters before and after the repetition, then each such 
line will contain about 7 or 8 words each monoalphabet ically 
enciphered by this keyword, a nd perhaps by careful scrutiny one 
can pick out the successive word separators . Note in the follow- 
ing transcription how the repeated sequence PBUVGI has been used 
as a sort of base for writing out the Lcxt in superimposed lines; 
how the word separators P and I appear in the lines above and 
below the lines with this repetition; how certain letters 
(E, Q, P, I, Z, M, D, L) appear to be distributed on each line 
more or less in accordance with the intervals to be expected of 
word lengths. 

AI > ICKGEER , riJEF\A7J^OVDV£PBNFNLUZIUR5Vl{POIZQVNYVBLIMKQHrv'iiPJCQBDJPBL 
YJJNIilTEJDZDVfiZLXZPUM;iPIMRYJAPJOZYBBlKUOT?pc©KBUIL 
YJEJYQDWFDGQGGKGIGD GPBUVGIi -IJffJQZCJSOKBQEOMZOTOVUKKL 1 

• JNZAEDPEQQGK UPBIJVGIO IRJMZVOMBMGFNMHLKXIvlDVt'JNVL 
CTYXSIfflVZJDaDOPQSPBMnMffiNZZBCVMIKAVLDJQXBSITffBL 
YJEEDGVW^ZLVUUPPNXAQIUjUBI^PLMOIZYVTWTVGWLJDCVPlNBL 
GKTYXCifflWEKFU^ZDFI 

b. Once the sequence of cipher equivalents for the word 
separators has been ascertained, this enables one to block out 
words and these having been enciphered monoalphabetically, solu- 
tion ccmes rather easily. For example, immediately preceding 
the 1st appearance of the sequence PBUVGI is the sequence 
QSGKGIGDC. The Q is, of course, the separator terminating the 
word in front of PGKGIGDC; the latter s’.iggests DIVISION. 

c. The primary components are based upon the keyword 
DERMATOLOGY and arc as follows: 

Plain . . . 'D E R M A T 0 L G Y B C F II I J K N P Q S U V W X Z 
Cipher . . . DERMATOLGYBCFKIJKNPQSUVWXZ 

d. The keyword for tho message is MUSKETRY, 
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ek The complete text is as follows; 

M U S K e T R Y 

ANCKGEHlTSCJEFVV/JflOVDluZBNFNLUZXUPlVRPOIZQVNYVBLIMQIiYlVRKQBDJDBL 
EIGHT PRISONERS FROM SEVENTY SEVENTH DIVISION INCLUDING ONE 

M U s K E T R i 

'^JJNIATEJDZDVQ i ZLXZPUMNAPIMRYJARI-'OZYEBYICUOTMGC^KBUIL 
OFFICER STATE THAT THEIR REGIMENT ATTACHED ON LEFT 

MU S K E TRY 

YJE JYQDWFDGQSGKG IGDCP1 3UVG II I JMUOZ.C JSOKBQEOMZO VDVVfiCKL 
OF SIXTEENTH DIVISION STOP FIRST OBJECTIVE" WAS HILL 

M U S X E T R Y 

^ZAEDPE^OGlO^WKIOiruTMZVOIffiMGFrMFJiaroVlWL 
FIVE TWO FIVE STOP THEIR NEXT OBJECTIVE HIGH 

MUSKETR Y 

CTYXSJffiVZJD^X)PQSPBMmiRmraZECVi/MIKAVLDJQXBSn7TBL 
GROUND EAST OF MARSH CREEK STOP FIRST OBJECTIVE 

M U S K E T R Y 

YJEEDGTOSZLVUIJPPNXAQNLUBIPLMOIZYVTMVGWLJRCIVYNBL 
OF OTHER THREE REGIMENTS NORTH AND SOUTH RIDGE 

M U S 

GKTYXCKEWEKFU^ZDFI 
THROUGH ROUND TOPS 

40 3. Examination of the text discloses four isomorphic 

sequences. They are superimposed for study. 

123456789 30U 
( A-UONNYSFMLUT 
. ( B-KVDDGZQUSXA 

Isomorphs ( c - M D W W R LGCBMV 

( D - D Y J J B K S N U D F 

These sequences contain all the letters of the alphabet except 
these 5s E, H, I, P, and X; so that oven if we can construct a 
chain of 26 places, we will have at least 5 blanks in it. 

The application of the principles of indirect symmetry of 
position to the lines of the super imposition diagram yields the 
following data; 
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Isomorphs 


Isomorphs 


Isomorphs 


A&B 


A&C 


A&D 


MUK 


UMC 


LUD 


OV 


OD 


OYB 


HD 


NW 


MNJ 


IG 


YR 


TFSK 


IOZ 


SLB 




TA 


FG 






TV 





The data from isomorphs A and C may be immediately amalgamated 
with those from A and B. By careful study of the columns of the 
superimposition diagram we may add data as shown below: 



Isonorphs 

A&B, A&C 

CMUK 

VvNDOVTA 

JRYGFQ 

BLSZ 



Isomorphs 

A&D 

AQZ . VGLIJDR. CW 
TFSKOYBMNJ 



As for the data under isomorphs A and D, it is obvious that we 
are here confronted with one of two conditions: 

(1) Either the two sequences, by chance, are the nearly 
complete halves of a single sequence of 26 letters, in which 
case we should put the two sequences together according to one 
of the following 13 arrangements: 

123456789 ID 11 32 HI 23456789 DU32 33 



A G Z . VGLUDE 



WjT FSKOYBMNJ . . . 
FSKOYBMNJ. . . T 
SKOIBMN J . . .IF 

.TFSKOYBMNJ. . 



or else 

(2) The bwo sequences (AQZ ... and TFS ...) represent two 
half -chains of 13 letters each, the letters of which must be 
properly dovetailed in order to produce a single sequence of 26 
letters. The former hypothesis is not sc likely as the latter. 

We could proceed to test out the former hypothesis, trying all 
13 arrangements mentioned above and seeing if the interval rela- 
tionships can be made consistent with those given by the actual 
data. This would be a lengthy and laborious procedure. On the 
other hand, we may assume the latter hypothesis to be true (that 
we have two half-chains) and try to dovetail them properly so as 
to produce a single chain of 26 places, which is not so difficult 
a process. 
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Suppose we superimpose the AQZ . . . half-chain over the TFS . . . 
half-chain so as to give values that will correspond to any one 
of the values given in the partial chains CMUK, Yv'NDOVTA, JRYGFQ, 
or JBLSZ. Thus, selecting VT in the t/DNOVTA chain: 

1 2 1 4 5 6 7 8 9 10 11 12 D 

AQZ.TGLUDR.Gn 

TFSEOYBMNJ. . . 

1 2 3 4 5'"-? * 9 ID 11 12 13 

It wi!3 bo seen tliat this yields values consistent with those 
given by the partial chains under isoruorphs A&B. Now since we 
arc probably really dealing with half chains of 13 letters, we 
may repeat the AQZ ... half chain in its super imposition with 
the TFS ... half chain. Thus: 

1 2 3 4 5 6 7 8 9 ID 11 3233 1 2 3 4 5 6 7 3 9 D 111233 
AQZ.VGLJDR.C W AQZ. V G L Q D S . C R 
TFSKOYBHS J . . . 

1 2 3 4 5 6 7 8 9 D 111213 

Since this gives the value AJ, we conclude tliat the YIND0VT& and 
JRYGFQ partial chains can bo combined at once into one chain: 

W N D 0 V T A J R Y G F Q 

In the same way the other partial chains may bo added to this 
sequence until a complete sequence (lacking only the 5 originally 
missing letters) has been completed, as follows: 

123456 7 8 910 11 12 13 14 15 16 1718 1? 2D 2122 2324^25 
RNDOVTA JRIGFQ . . 8 1. 8 Z . C M U K . . 



The problem states that the letter Z is being used as the 
word separator, lienee the letter iumo.diut.ely preceding each 
isomorph and the last letter of c-e.cn ipomorph should be the 
equivalent of Zp, the seporator. % studying the various cipher 
equivalents of this separator letter before and at the tail end 
of each isomoxph the following pairs can be constructed, which 
give the sequent values of letter’ Zp in sequent cipher alphabets, 
according to sequent key letters. Thus 



NU0NNY3FMLUT gives NT 

FKVDDGZQUSKA " FA 

A M D1MHILGCBMV " At 

TDYJJBKflNUDF " TF 



cs sequent values for Z p 
it ”ii ii ii 

n ii ii ii ii 

ii ii ii ti ii 



Uniting the sequent values in a chain, one gets the sequence 
NT TF FA AV = NTFAV a 3 the successive values of Zp, corres- 
ponding to successive key letters. Whether this is the entire 
sequence of separator values, that is, whether the key is but 
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5 letters in length cannot yet be ascertained definitely. How- 
ever, one might make a try at blocking out some or all of the 
words in the message by means of this sequence of 5 separator 
values. Simply go through the text and underline places where 
letters of the sequence NTFAV ocuiir in proper order . Thus: 

YRMLT GCTJH IIPFTF 3EA0L JEDDA 

•> •> 

• * 

V K V N U 0 N N Y S F M I. U T I'.TFK VDDGZ... 

Now lot us work backward from a known point. It is obvious that 
immediately preceding the inomorph UCNNYE FLILUT there is, in the 
plain text, a separator letter, Zp. Fence Zp must bo Nc. There- 
fore, the V immediately preceding this N cannot bo a separator. 

The V before the K must be Zp, the separctoi’. If this is correct, 
then the A immediately in f^ont of that V cannot be a separator; 
the A in BBAOB must be the separator, Zp. If this is correct, 
then the 1st of the two F*s in HPFPF must be the separator and 
not the 2nd, since if the latter were the separator, one would 
have a 2-letter vrord with both letters identical (corresponding 
to BB C ) , which is impossible in English. By proceeding olcng 
those linos, by careful observation and deduction, the entire 
text can be blocked off into word lengths. Thus: 

YRMLT GCTJHHPF PFBBA OBJSDDAV KVN 

UONNYSFMLUX TLTF KYDDGZQUSKA 0 Y F D V 

X K V W N HPWOT HIYUF ’.7 B B A M D W V/ R L G C B M v 

CAQPN DPZGHGHGOST KJEGF IVCZYSA 

E XXV HMGGXN DLRQT DIJJBKSNHDF PVZD. 

The cipher toxt can now bo converted into monoalphabetic terms 
and solved quite rapid] y. One might, to satisfy curiosity, find 
th 6 keyword to the message. It is DRONE. The solution is. as 
follows: 

drone 

YOURZ PLATCONZ 71 ILL] PROCEEDZ TOZ 
YRMLT GCTJH II PF PFBBA OBJSDDAV KVN 

D R 0 N 

GETTYSBURGZ VIAZ GETTYSBURGZ PIKEZ 
ITONNYSFMLUT ILTF K VDDGZ QUSKA OYPDV 
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The primary components are: 



Plain ... FEPZHDOYIBMVLJRSCNXUGQWAKT 
Cipher ... GFQXHBL3ZICMUKEPWND0VTAJRY 

These two components were derived, by (key number) columnar 
transposition from the keywords WISHFUL and THINKING. 



7352164 
WISHFUL 
Plain ABCDEGJ 

component K Iv! N 0 P Q R 
T V X Y 2 



6 2 3 5 4 1 
T H I N K G 
Cipher A 3 C D E F 

component J L M 0 P Q 

R S U V W X 
Y Z 
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IiESSON 3 - Irregular-length plain-text groupings. 



Weight ; 

8 la. This problem is easily read by converting the cipher 

letters into normal alphabet equivalents (using a standard 
reversed sequence against a direct) and then completing the 
plain component sequences. The plain text reappears in 
irregular length sequences on different generatrices, the 
latter corresponding with the successive letters of the key 
FOGHORN. The solution is as follows: 

F 0 G 

FIVEHU NDREDINFANTRYRE PLACEME 
A X K B Y L BLXXLGB! OBVKQXK R V G E C U C 

H 0 

NTSARERE Q U I R E D T 0 R E F I L L C 
UOPHQDQ L Y U G X K L V A X K J G D D M 

R N 

OMBATUNITSASSOONAS POSSIBLESTOPR 
DFQRYXEJIZR ZZDDEEZ YZVVFMCJVUZYW 

F 0 

QUESTR EPLY 
PLBNMO KZDQ 

2 b. The successive letters of the keyword FOGHORN have the 

following numerical values (in tho normal alphabet); 

FOGHORN 
6 13 7 3 15 18 14 

Each keylettor is then used for enciphering as many plain-text 
letters as its numerical value. Thus, the setting A p = F c is 
used for the first 6 letters; A p = 0 C , for the next 15 letters, 
and so on. 

8 2a. Thi.s problem is identical in principle with Problem 1, 

but the primary components shift much sooner than in Problem 1, 
making the solution more difficult. The primary components are 
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both direct standard sequences. The keyword is FRIDAY and 
the solution is as follows: 
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N 


0 N 


W 


E S 


T S L 0 P 


E 


0 


F 


A 


M B R 


G 


G 


F 


J z 


E 


Q V*' 


V 


R Q 


W 


C Q 


R Q J M U 


J 


rr 

JL 


W 


R 


D S I 




I 


D 


A 






















0 


S 


E 


H I 


L 


L 






















W 


A 


M 


P L 


0 


L 























2 b. Tho letters of the keyword ers given numerical values 

corresponding to their relative order in &he normal sequence. 
Thus: 



FRIDAY 
3 5 4 2 1 6 

Each keylotter then enciphers as many letters as its numerical 
value, the F secondary alphabet being used for the first 3 
letters, the R secondary alphabet for the next 5 letters, and so 
on. Ascertaining the method in which the keyword controls the 
shifting of the components in cases like this and the foregoing 
is a matter of observation and experience, with the application 
of simple reasoning. The student should always try to resolve 
a problem into its simplest terms, for in practical work it will 
often be found of great assistance in solving unlmown systems. 

30 3a. Tho idiomorphic repetition and its isomorpli underscored 

in the cryptogram suggest the word COMMUNICATION. Immediately 
beyond the first two appearances of this word (1st and 3rd lines 
of text) are the sequences: 

Line 1 

ZSIIFQ VSORVSQ QXUTYYLBRAAXHXY C R I E C 
COMMUNICATION 



Line 3 

ZSIIFQVZ0R7SQ SFCPCMCXHIICZCD CRT Y I 
COMMUNICATION ^ ^ ^ 
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These tv/o sequences certainly suggest that the same or nearly 
the same words follow COMMUNICATION both times, and that their 
different external appearances are occasioned by difference in the 
key. The word which commonly follows COMMUNICATION is WITH. The 
form of the sequences suggests: 



ZSIIFQVZORVSQ QXUTYVLBR A_A IHXI C R I E C 
COMMUNICATION WITHGECONDDIVIS ION 



ZSIIFQVZORVSQ SI' CPC MCX HH CZCD CRT Y I 

COMMUNICATION W I T H T H I R D DIVISION 



When these hypo the tical values are inserted within the cells of 
a sequence-reconstruction diagram, together with the values given 
by the isomorphic sequence pointed out above, one has the follow- 
ing: 



ABCDEFGIIIJKLMNQPQRSTUVWXYZ 



0 


Z 


V 


I 


Q S 


R F 




E 


H 


D 


R 


s u 


B Z 






L A V 


T X 




r: b 


Y U 


E Q 






P F 






0 


S 




H 


K C 




I R 


X b 


Z 



From these values it is possible to reconstruct the primary cipher 
component based upon LAWN TENNIS: 

LAWNTEISBCDFGHJKMOPQRUVXYZ 

From this point on solution can be promptly reached by decipher- 
ment. It is as follows: 

M(13) 0(15) 

COMMUNICATION W I T E S 2 C 0 N D D 1 V I S 
ZSIIFQVZORVSQ QXUTYVLBRAAXHXY 

N(14) U(21) 

IONY/ILLBEDISCO N T I N U E D U N T I L J U N E T II R E 
CRIECNNFBHCDGR YZAYMLEMYZAUCMYLZBKL 

M(13) E(5) N(14) 

COMMUNICATION WITHT HIRDDIVISIONUN 
ZSIIFQVZORVSQ SFCPC MCXHHCZCDCRIYI 

T(20) M(13) 

TILFURTEERNOTICESTOP BSGINNINGATZE 
BDTKZYBOCYSUBDHCFBUV YUWVQQVQWORKU 
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0(15) N(14) 

R0ZER0FIVE2ER0S TRICTRADIOSILE 
FBMVFBWXHVHVFBY SXCGSXTHCRDCNB 

U(2l) M(13) 

NCEWILLBEOBSERVEDUNTI LOOK TACT WIT HE 
YTLXAUUNLGNWLKOLEMYZ A MZSQROZRPVRNU 

E(5) N(U) 

NEMYH ASBEENMADESTO? 

BDUNP TDFBBTQTHBDSRU 

T(20) M(13) 

WIEECOMMUNICATIOWWIL LBERESTRICTED 
' IDYCHtJRRZSDHEBDUSIDT MYUDUXRDVZRUL 



0(15) H(L4) 

TOABSOLUTE I.IINIM UM REQUIREMENTS 
UBPZYBOGUYSXRXS YQXBVYCXBQBISD 



b. Solution of this message is accomplished by employing 
the LAWNTEIS ... sequence and completing plain-component sequences. 
The text is as follows: 



FA M 

Y 0 U R B A T T A T, I 0 N W 
CWIEQG E ROMVSQP 

A M 

J UNCTIONFIVEEI 
K FQZRVSQAVGUUV 



E F 



I L 


L A 


S 


S 


E 


M B L 


E 


A 


T 


R 


0 


A 


D 


V M 


M 0 


X 


X 


D 


U H E 


B 


G 


K 


E 


W 


G 


U 




E 








F 




A 












G H 


T S 


E 


V 


E 


N W I 


T 


H 












0 P 


C G 


D 


S 


M 


J H 0 


K 


J 













M E 

TRANSPORTATIO NATFO 
RDOQXBPDRORVS BICMV 



F AM 

0 R T H I R T Y P M 
IEKYOE E JBI 



c,. The keyword for Problem 3a is MOIRJMENT each letter of 
which not only determines the secondary alphabet to be employed, 
but also for how many plain- text letters, according to the key: 

M 0 N U M E N T 
13 15 14 21 13 5 14 20 



In Problem 3b the keyword is F A M E 
same manner. 6 1 13 5 



used in exactly the 
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4a.* From the data given it is clear that - 

Message 1 should start with NTJMBFiRFIFTEENX , 

Message 2 should start with NUMBEKTh'ENTYTWOX, 

Message 3 should start with NUMBERS IXTEENX. 

Placing these plain-text beginnings under the proper messages, and 
applying principles of Indirect symmetry of position, the primary 
component based upon PAN AMERICAN UNION is reconstructed. The 
solutions are as follows: 



From B to A 



B 



E 



R 



N 


U 


M 


B 


E 


R 


F 


I 


F 


T 


E 


E 


N 


X 


E 


N 


E M Y 


M 


A 


CHIHEG 


U 


N 


N 


E 


S 


T 


U 


H 


0 


K 


B 


D 


Q 


F 


Q 


E 


II 


U 


I 


A 


U 


I 


0 U M 


U 


I 


F S D C 0 Q 


G 


C 


C 


0 


Y 


Z 










I 








A 










I 






B 


E 


R 












A 


P 


T 


U 


R 


E 


D 


S 


T 


0 


■Q 


II 


A 


V 


TP 


T 


EIIP 


R 


I 


S 0 N E R 


S 












C 


I 


F 


H 


D 


B 


L 


Z 


? 


B 


I 


T 


C 


A 


B 


P 


BUI 


J 


K 


X G I U 0 


Y 












From C to 


A 

Si 


















































I 










B 






E 












R 














N 


U 


M 


B 


E 


R 


T 


w 


E 


N 


T 


Y 


T 


W 


0 


X 


E N E 


M 


Y 


A I R P L A 


N 


E 


S 


H 


A 


V I 


U 


H 


0 


K 


B 


D 


P 


N 


B 


F 


E 


N 


Y 


P 


G 


A 


0 C 0 


U 


M 


I D B R TV I 


C 


0 


Y 


S 


I 


P r 










I 










A 










I 






B 


E 




I 










L 


0 


C 


A 


T 


E 


D 


0 


U 


R 


C 


0 


H 


M 


a: 


N 


D P 0 


S 


T 


X W ILL 


M 


0 


V 


E 






X 


J 


G 


C 


P 


B 


L 


J 


H 


I 


G 


J 


0 


0 


C 


U 


L I J 


M 


E 


A P B V V 


U 


H 


P 


0 






From A to 


C 


















































I 










B 






E 












R 














N 


U 


M 


B 


E 


R 


S 


I 


X 


T 


E 


E 


N 


X 


N 


E 


E D T 


V 


0 


M 0 R E C 0 


P 


I 


E 


S 


0 


f r 


U 


H 


0 


K 


B 


D 


Z 


F 


M 


E 


II 


U 


I 


A 


I 


U 


0 K Z 


±i 


H 


U H B 0 F H 


R 


D 


0 


Y 


H 


L T 










I 










A 










I 






B 


E 














I 


V 


I 


S 


I 


0 


N 


F 


I 


E 


L 


D 


C 


0 


D 


E 


N U M 


•B 


E 


R F 0 U R 














F 


A 


F 


Z 


F 


J 


U 


Q 


F 


R 


X 


L 


G 


J 


L 


B 


UHO 


T 


II 


0 K G F 0 















b. The principal lesson which this problem holds for the 
cryptographer is the danger (to cryptographic security) of 
following a fixed procedure in enciphering and especially of en- 
ciphering reference numbers in so conspicuous a manner. 
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The principal lesson the problem holds for the cryptanalyst 
is that he should be quick to note weaknesses such as the fore- 
going and take advantage of bhem so far as concerns enemy 
traffic. He should do all in his power to prevent procedures of 
this kind in our own traffic and to call attention to such weak- 
nesses when he finds them in our own traffic. 
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la. Messages with their plain texts: 8 






(1) 


REPO RTTO CO EPS 
z c t p z w z p e p z q x 


• 




(2) 


P R E P L R E T 0 M 0 V }’ 

wtoqmxzay s p r c 






(3) 


NEXTTRAINWILL 
t c r w c x t b h h 






(4) 


CIIIEFSIGNA L 
ofkcszriha 






(5) 


T AKESTEPSTO 
yancihznuw 






(6) 


0. RDERSVI1L 
v zietirrgx 






(7) 


SENDTHREEMEN 

hcqickguon 


• 




(8) 


REFERRINGTO 

zcfclxrkqw 






(9) 


STPO NGRESIST 
h w w p teweimjs 






(10) 


CO UNTEBATT ACK 
ep dozeliksj 






(11) 


PRO K P 1 0 RDER 
wts sqzp ziet 
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(12) 


R 


E G I 


M 


E N T U I L L 




z 


egg 


y 


f c s b g 


(13) 


A 


T T A 


c 


K P 0 STPO NEE 




c 


v/ z a 


0 


o e m h w t p 


(14) 


A 


D V I 


S 


E 0 U K Q U 




c 


i y g 


i 


f b d t v x 


(15) 


C 


ANY 


0 


U M 0 VETO UR 




e 


a q d 


r 


dns reap dt 


( 16 ) 


T 


H R E 


E 


M 0 R E R E 




y 


f v/ c 


q 


q b z c v c 


(17) 


p 


REV 


E 


NIENEB Y 




w 


t e z 


q 


s k u h c 


(18) 


R 


E Q U 


E 


S T Y 0 U T A K E 




z 


C V X 


q 


z k z y d v/ 1 k 


(19) 


W 


H E N 


Y 


0 URBRIGABE 




a 


Too 


3 


t d t i t 


(20) 


G 


0 0 


D 


PRO GREGS 




k 


P v 


f 


q w p k t e v 


(21) 


R 


ADI 


0 


NUMBER 




z 


a b g 


r 


t x p u q x 


(22) 


T 


v; E N 


T 


Y F 0 UR 




y 


h G 0 


c 


u h ra d t 


(23) 


A 


C C 0 


R D I N G T 0 




c 


1 c p 


z i k o t h 


(24) 


W 


HAT 


I 


S Y 0 U P, 




a 


f 1 w 


W 


z q m d t 


(25) 


R 


ERA 


D 


10 MARCH 




z 


c w a 


P 


mb s a v/ 1 


(26) 


S 


HAL 


L 


WEPRO CEED 




h 


f I m 


h 


rznap ecei 


(27) 


A 


C T I 


V 


ITYINCREASI 




G 


1 z g 


e 


ra k z t o 
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1 

3 

1 



(28) NO THINGSEEN 
tp yflcotizuh 

(29) REGO MBENDTHAT 
zeep sneophdyl 

(30) ADVISE A TO NCE 
ciygiftsy tie 

(31) TRO 0 PSWILLREMAIN 
y t s v v v d g h p g u z 

(32) I N C A S E 0 FFAILURE 
nocaifb j b 1 g h y 

(33) RUGHEE PL A CEMENTS 
xxxflfegj 1 

(34) REPLACEMENTS 
zctmmbzjoo 

(35) SENDINGTWO SETS 
hcqiwsysbp hezv 

_b. Key for messages: CALAMITY JANE 

_c. Primary components: Plain . . .ABCDEFGHIJKLM. . .Z 

Cipher . . .HYDRAULICBCEF...Z 

d- Interrupter: 0^. 



35 




2a. Same primary components as in Problem 1. Key MISSISSIPPI 
RIVER, applied to irregular lengths of text, starting at beginning 
of keyword after encipherment of each R D . Solution most easily 
obtained by guessing the probable word REGIMENT, the indications 
of the probable presence of this word being the address and 
signature . 



C. 0. 95th Infantry 



Plain: 


I 0 


U 


R 


R 


E 


G I M E 


N 


T 


Vi 


I 


L 


L 


M 


0 


V 


E 


U P 


T 


0 


P 


Key: 


M 


I 


S 


S 


M 


M 


I S 


S I 


S 


S 


I 


P 


P 


I 


E 


I 


V 


E 


R M 


I 


S 


S 


Cipher: 


J 


T 


K 


F 


L 


Q J D 


L F 


I 


J R H 


R 


? 


M 


T 


0 


K 


W A 


H 


C 


B 


Plain: 


0 


S 


I 


T 


I 


0 


S 0 


N B 


I 


L 


L 


0 


N 


E 


N 


I 


N 


E 


0 N 


E 


A 


N 


Key: 


I 


S 


S 


I 


P 


? 


I E 


I V 


E 


R 


M 


I 


S 


S 


I 


S 


S 


I 


P P 


I 


R 


I 


Cipher: 


T 


G 


D 


H 


H 


L 


S 0 


S R 


P 


K 


H 


T 


I 


X 


S 


D 


I 


F 


L U 


F R 


S 
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Plain: 


D 


P 


It 


E 


P 


A 


R 


E 


T 


0 


A 


T 


T 


A 


c 


K 


R 


I 


L 


L 


0 


N 


E 


N 


I 


Key: 


V 


E 


R 


M 


I 


S 


S 


M 


I 


s 


s 


I 


S 


S 


I 


P 


P 


I 


R 


I 


V 


E 


R 


M 


I 


Cipher: 


Z 


Z 


S 


Q 


V 


s 


F 


Q 


H 


c 


s 


K 


J 


s 


B 


D 


Z 


M 


K 


P 


E 


Vi 


I 


D 


M 



Plain: NEFOU R 

Key: S S I S S I 

Cipher: I X G C K X 

Smith, Brigadier General. 

30 3. Same primary components as in Problems 1 and 2j each 

word begins with a new juxtaposition of the primary components, 
the keyword JAPAN being used for this purpose. The letter X is 
used as a word separator, and is treated as though it were an 
ordinary letter. IVithin each word the cipher component is 
shifted to the left after the encipherment of each letter, in- 
cluding the X separator. The latter then serves as a signal 
to shift the cipher component to the next keyletter before be- 
ginning to encipher the next word. 

Solution is most readily obtained by converting the first 
ten cipher letters Into their plain-component equivalents, com- 
pleting the plain-component sequences initiated thereby, and 
noting plain-text on a diagonal line: FIVEXTRUCK. 

Message 



Plain: 


F 


I 


V 


E 


X 


T 


R 


U 


c 


K 


S 


X 


Ii 


0 


A 


D 


E 


D 


X 


W 


I 


T 


H 


X 


W 


Key: 


J 


K 


M 


N 


0 


A 


U 


L 


I 


C 


B 


E 


? 


Q 


S 


T 


V 


W 


X 


A 


U 


L 


I 


C 


N 


Cipher: 


■o 

t 


V 


E 


S 


K 


Vi 


V 


H 


B 


P 


i 


I 


R 


I 


S 


X 


II 


H 


T 


H 


J 


Z 


K 


U 


G 


Plain: 


0 


U 


N 


D 


E 


D 


V 

x> 


M 


E 


N 


X 


A 


R 


E 


X 


P 


Ii 


0 


C 


E 


E 


D 


I 


N 


G 


Key: 


0 


P 


Q 


S 


T 


V 


w 


J 


K 


M 


N 


A 


U 


T 

Li 


I 


P 


Q 


s 


T 


V 


W 


X 


Z 


H 


Y 


Cipher: 


u 


G 


L 


W 


Z 


z 


S 


Z 


r 


D 


J 


A 


V 


E 


A 


I 


E 


n 

u 


W 


H 


v 


Y 


I 


J 


I 


Plain: 


X 


S 


0 


u 


T 


II 


X 


0 


N 


X 


N 


r 

Xi 


>T 

It 


K 


I 


N 


G 


X 


R 


0 


A 


D 


X 


S 


T 


Key: 


D 


A 


U 


L 


I 


c 


B 


N 


0 


P 


J 


K 


M 


N 


0 


P 


Q 


s 


A 


U 


L 


I 


c 


P 


Q 


Cipher: 


Z 


V 


Q 


H 


H 


M 


L 


A 


A 


M 


H 


K 


D 


H 


Z 


U 


Z 


0 


T 


Q 


L 


E 


u 


E 


G 


Plain: 


0 


P 


X 


T 


H 


F, 


I 


X 


8 


H 


0 


U 


L 


D 


X 


R 


E 


A 


C 


H 


X 


S 


0 


U 


T 


Key: 


S 


T 


V 


• 

ii 


U 


L 


I 


c 


II 


0 


P 


Q 


S 


T 


V 


J 


K 


M 


N 


0 


P 


A 


u 


L 


I 


Cipher: 


C 


E 


Q 


w 


G 


E 


U 


u 


C 


X 


L 


J 


U 


X 


Q 


A 


P 


M 


P 


X 


M 


V 


Q 


H 


H 


Plain: 


H 


X 


G 


A 


T 


E 


X 


B 


Y 


X 


II 


0 


0 


N 


X 


T 


0 


D 


A 


Y 


X 


S 


T 


0 


P 


Key: 


C 


B 


? 


Q 


S 


T 


V 


A 


U 


L 


N 


0 


P 


Q 


s 


J 


K 


M 


N 


0 


P 


A 


U 


L 


I 


Cipher: 


M 


L 


X 


Q 


J 


rr 

Li 


Q 


U 


R 


R 


R 


u 


L 


b 


0 


L 


D 


P 


N 


M 


M 


V 


X 


S 


V 


Plain: 


X 


B 


E 


X 


T» 

i 


Ft 


E 


P 


4 

21 


R 


E 


D 


X 


T 


0 


X 


E 


X 


P 


E 


D 


I 


T 


E 


X 


Key: 


C 


P 


Q 


s 


A 


U 


L 


I 


C 


B 


E 


F 


G 


N 


0 


P 


J 


K 


M 


N 


0 


P 


Q 


S 


T 


Cipher: 


u 


Q 


\: 


0 


Q 


V 


E 


V 


c 


H 


K 


K 


B 


B 


u 


M 


0 


F 


A 


S 


S 


H 


G 


X 


P 
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Plain: 


T 


K 


A 


N 


S 


F 


E 


R 


X 


0 


F 


X 


V; 


0 


U 


N 


D 


E 


D 


X 


T 


0 


X 


V 

X 


0 


Key: 


A 


U 


L 


I 


C 


B 


E 


F 


G 


P 


0 


s 


A 


u 


L 


I 


C 


B 


E 


F 


N 


0 


P 


J 


K 


Cipher: 


W 


V 


L 


S 


H 


K 


IC 


D 


B 


L 


X 


0 


H 


Q 


H 


S 


F 


J 


J 


C 


B 


U 


M 


F 


D 


Plain: 


U 


R 


X 


T 


R 


U 


C 


K 


X 


T 


R 


A 


I 


N 


X 


F 


0 


R 


X 


T 


R 


A 


N 


S 


F 


Key: 


M 


N 


0 


A 


U 


L 


I 


C 


B 


P 


Q 


s 


T 


V 




A 


U 


L 


I 


N 


0 


P 


Q 


S 


T 


Cipher: 


B 


I 


K 


W 


V 


H 


B 


P 


L 


F 


E 


s 


R 


B 


s 


B 


Q 


W 


A 


B 


C 


P 


L 


G 


H 


Plain: 


E 


R 


X 


T 


0 


X 


H 


0 


S 


P 


I 


T 


A 


L 


X 


A 


T 


X 


S 


0 


U 


T 


E 


X 


N 


Key: 


V 


W 


X 


J 


K 


M 


X*. 


U 


L 


I 


C 


B 


E 


F 


G 


P 


Q 


S 


A 


U 


L 


I 


C 


B 


W 


Cipher: 


H 


K 


T 


L 


D 


G 


F 


Q 


X 


V 


N 


D 


E 


V 


B 


P 


G 


0 


V 


Q 


H 


H 


M 


L 


R 


Plain: 


A 


N 


K 


I 


N 


G 


X 


B 


L 


I 


D 


#■» 


E 


X 


S 


T 


0 


P 


X 


S 


M 


I 


T 


H 


X 


Key: 


0 


P 


Q 


S 


T 


V 


M 


J 


K 


M 


N 


0 


P 


Q 


A 

ii 


U 


L 


I 


C 


P 


Q 


S 


T 


V 


W 


Cipher: 


0 


U 


R 


D 


C 


D 


S 


K 


U 


T* 

H 


Q 


7* 


V 


N 


V 


X 


S 


V 


u 


E 


U 


D 


K 


R 


S 




Solutions 

Military Cryptanalysis, Part III, 4-?. 5, 1938 



REF ID : A60198 



ARMY EXTENSION COURSES 
SOLUTIONS 

SUBCOURSE - Military Cryptanalysis, Part III. 

LESSON 5 - Cipher -text auto -keying. 



Weight ; 

10 1. The solution of this message requires only the use of 

two normal sequences, one direct, the other reversed. The usual 
simple steps having been tried, without success, cipher-text 
auto-keying is assumed. Since the initial keyletter is unknown, 
we may disregard the first plain-text letter of the message 
(which will be found easily enough later, from the context) and 
start with K as the keyletter. Then the 1st cipher group yields 
the following; 



K G G L N 
- E A ¥ Y 



Obviously the word is HEAVY. 

30 2. A frequency distribution Tor each of the first 5 columns 

of letters is made. Each distribution shows monoalpha beticjty, 
and shows crests and troughs in the same order but at different 
points along the normal sequence. These frequency distributions 
are solved by applying the principles of direct symmetry of 
position and the mixed primary component is reconstructed. The 
five secondary cipher alphabets are as follows: 

Plain - ABCDEFGHIJKLMNOPQF STUVWXYZ 
CDEFHJKMOPQRT UV1.‘ XYZSIGNALB 
HJKMOPQRTUVW XYZSIGNALBCDEF 
Cipher - IGNALBCDEFHJKMOPQRTUVV/XYSS 
EFHJKMOPQRTUV'ffXYZSIGNALBCD 
F H J K M 0 T Q R T U V U X Y Z S I G N A L B C D E 

The beginnings of some words (as in Nos. 7, 18, 42, etc.) 
indicate definitely what plain-text letbors follow in columns 
succeeding co3.umn 5. From these values, the system is quickly 
determined to be cipher -text auto-key with 1st letter keying 
6th, 2d keying the 7th, etc. Note the initial keyword for the 
messages (CHIEF) reappearing under Ap in the reconstruction 
skeleton. 

The plain text of the first 20 messages follows: 
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1 . 


TWO HUNDRED PRISO 


11. 


ATTACK PLANES HAV 


2. 


EASTERN SLOPES OF 


12. 


ANTI-TANK GUNS ON H 


3. 


THE ATTACK PL ANNE 


13. 


NEARLY ALL OUR GAS 


4. 


OUR ATTACK JUMPED 


14. 


WHAT ARE YOUR DISP 


5. 


YOUR REQUEST FOR A 


15. 


REMAIN ON THE DEFE 


6. 


ENEMY TROOPS HAVE 


16 . 


IN SPITE OF REPEAT 


7. 


REQUEST ADDITION 


17. 


OVERHEAD MACHINE 


8 • 


SEVENTY FIVE AMMU 


13. 


MACHINE GUN FIRE I 


9. 


ARTIiIjERY FIRE IS 


19. 


INTERDICTING FIR 


10. 


THREE ENEMY AIRPL 


20. 


THE FIRST FIELD AR 




This problem illustrates 


how 


easy it is to solve < 



this type when a sufficient number of messages is available to 
permit of this method of attack by super imposition. If this were 
not possible, solution would become much more difficult. 

50 3. These messages being only 11 in number, the method of 

solution by super imposition is impracticable. Frequency disi:-.‘ - 
butions based upon the letters immediately following each 
different cipher letter must be prepared and these are solved 
by applying the principles of indirect symmetry of position. 

The mixed primary components are based upon the keypbrase 
ENGLISH-JAPANESE DICTIONARY. They are as follows; 

Plain - ENGLISHJAPDCTOKYBFKMQUVWXZ 
Cipher - ENGLISHJAPDCTOKYBFKMQUVWXZ 

The initial keylctters for the messages are as follows; 

1) N 4) R 7) F 10) L 

2) U 5) E 3) E 11) B 

3) N 6) F 9) E 

The texts of the messages aru as fullows: 



Solutions 

Military Cryptanalysis, Part III, 5-p*2, 1938 



' 






REF 


ID: A60198 












Weight: 


1 


2 


3 


4 






5 












I. 














A. 


C G F I It 


S T D I V 


I S I 0 H 


3 T 0 P H 


A 


V 


E J U 








T H S P V 


G R X G X 


G JGXZ 


I B L T X 


E 


V 


V LX 






B. 


STRET 


U RUED 


T 0 C 0 M 


M A N D P 


0 


s 


T F R 








LILLY 


D X Z Z P 


U i; M h Z 


K E N C Q 


J 


T 


X Y L 






c. 


0 M H I L 


L F I V E 


HINET 


U 0 0 C C 


U 


p 


I E D 








B P Y M V 


Z B Q 3 B 


F U V V A 


S K S B N 


V 


s 


PPM 






D. 


B Y F 0 U 


R T H I N 


FANT R 


Y S T 0 P 


E 


N 


E M Y 








P X Y G W 


C VI L J A 


Z J it Q A 


1/ G R N D 


D 


C 


C I M 






S. 


ONNOR 


T K I 3 M 


A K I N G 


A H E A V 


Y 


» 


T T A 








H J A U P 


U N S D L 


C L J A D 


KXXHG 


F 


z 


c w s 






F. 


C K 0 N H 


I L I, S I 


X 7, E 11 0 


SIX 










• 




B A U V G 


H P T F U 


M K IC II LI 


X G E X X 


















II. 














G. 


I H A V E 


8 E N T A 


M A C II I 


NEGUS 


S 


E 


C T I 








ZSOPP 


R R Y N P 


G D U N S 


H H A L I 


F 


PQHD 






H. 


ONFRO 


M R E S E 


R V E B A 


T T A L I 


0 


N 


F 0 T J 








W X Y L 3 


? v; W G G 


BTIGC 


V A B M I, 


D 


C 


G Y D 






J. 


R T H I N 


FANT R 


Y T 0 R E 


I N F 0 R 


C 


E 


T R 0 








X D B Q U 


TQUJD 


D V P IV 7/ 


N G M II Q 


a 


8 


FSK 






K. 


0 P S 0 N 


H I L L F 


I V E S I 


X C I X S 


T 


0 


? C G 








SRKHJ 


0 F Q W R 


I! A R K B 


U E I G J 


Ivl II 


Y E G 






L. 


S E C 0 N 


D B R I G 


A D E I' E 


R I 0 D 










• 




J J R S H 


B H f » X E 


A K K N N 


Y M II B X 
















III. 














M. 


SUB M I 


T R E C 0 


M MEND 


A T I 0 N 


S 


F 


ORE 








HNFDR 


E R R Z T 


S X X Z P 


F L J Q U 


E 


F 


IXK 






N. 


A N D L I 


N G C I V 


ILIA H 


S INYO 


U 


R 


Z G N 








II J F Q X 


ZHIBT 


E M Xi S H 


C Y B S K 


0 


N 


E 0 R 






P. 


E 0 F A D 


VANCE 


















P. N K E D 


HRYEE 
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IV. 








A. 


C / L L M 


E U P 


A S 


S G 0 N A 


8 Y 0 U C 


A N A N D 






Z J D 0 II 


II N D 


K W 


GYGLC 


B S K 0 X 


H J Y B E 




B. 


G I V E M 


E A N 


E S 


THAT 


E 0 F T H 


E E N E M 






G H G G U 


DLI 


I P 


U Z K E T 


T Z B G A 


A A P P G 




C. 


Y S I T U 


ATI 


0 N 


ONYOD 


R F R 0 N 


T 






F V E T J 


YES 


K M 


K J V P I 


K P W D C 


TJ X X X X 












V. 








D. 


THECG 


W A N 


T S 


A L I S T 


0 F C A S 


U A L T I 






T K K L S 


GDC 


XI G 


D 0 F V A 


U T Yt 8 D 


S 0 B G H 




E. 


E S A T F 


I V E 


P M 


C 0 N F E 


R E N C E 


TODAY 






H C M S V 


E V V 


S X 


P V Iff R E 


G G L R R 


E 0 i; S Q 


• 










VI. 








F. 


B E I D G 


EFT 


V E 


II U S D R 


E D Y A R 


D S S 0 U 






J u z ? c 


C G I! 


G G 


A L I R G 


G T b P W 


J T F I Z 




G. 


T II E A S 


T 0 F 


S C 


OTTNiJ 


E D S S T 


R E H G T 






C F F Z I 


3 L Q 


Z D 


U PUVV 


V H C B G 


B B F M vS 




h T . 


H E N I N 


G 














C C T B F 


M X X 


X X 


















VII. 








J. 


S E N D G 


0 P Y 


Y 0 


U R C I R 


C U L A T 


I 0 N M A 






V V Vi J K 


SRL 


K S 


E E Z L F 


G W E A Q 


X C T S 0 


A 


K. 


P A T 0 N 


C E 










w 




V I 3 L I 


Y Y X 


X X 


















VIII. 








L. 


S U B M I 


T Y 0 


0 R 


SCHED 


U L E 0 F 


F L I G H 






S E P B 0 


Z R N 


V D 


Y E H H B 


C R R N K 


A C Y F W 




If. 


TSIMM 


EDI 


A T 


ELY 










PRKCI 


IRK 


E T 


T Y I X X 
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IX. 










A. 


E I 


G H T 


I H CHS 


HELLS A R 


S F A 


L L 


I N G 






E I 


H T X 


G L R Q Z 


S S A C B XT 


T L C 


R F 


U V X 




B. 


I N 


VIC 


INIIY 


R 0 A D J U N 


C T I 


0 N 


F I V 






G L 


ZLR 


K M W P X 


T Z J F X HQ 


3 F U 


A P 


E I E 




C. 


E H 


U N D 


R E D Y A 


R D S E A ST 


0 F H 


E R 


E 






E H 


HGT 


E E D Z J 


USDDK 11 P f 0 11 


M J 


J X X 












X. 










D. 


E N 


E M Y 


A D V A N 


C E If A S B E 


E N C 


H E 


C K E 






L I 


I W T 


Q I E A P 


Q Q E A 0 L L 


L I Y 


U U 


H X X 




E. 


D S 


TOP 


HEISD 


I G G I N G I 


N A L 


0 N 


G F R 






A 0 


Z T U 


N N S D Q 


X E G H J P 0 


R V Z 


T 0 


Y H Q 


• 


F. 


0 N 


T 0 F 


B R I G A 


D E 












J A 


Q J X 


R G H A 3 


E E X X X 


















XI. 










G. 


S U 


B M I 


T L I S T 


3 II 0 W I N G 


L 0 C 


A T 


ION 






U B 


HZL 


Y K V II 0 


K X C A T 0 Y 


KSB 


X D 


it 1 G 




H. 


0 F 


E L E 


M E N T S 


0 F F I R ST 


3 R I 


G A 


D E A 






Y H 


HP? 


G G L Y Q 


J X Y M J T X R G II 


A B 


E E A 




J. 


T P 


RES 


E N T T I 


M E 












Q L 


F F V 


V P U Z 


K K X X X 










10 


4* 


Having 


; reconstructed the primary components 


used in 




Problem 


3, the 


solution of this message represents merely a 1 


A 


special 


application of the method used in solving Problem 1, 


w 


despite 


the fact tbab an introductory keyword of 7 letters is 




used. By trying introductory keys of 1, 


2, 3, 


. . . letters the 1 




solution is solution is reached when IZNFU is used for keying fi 




the 


3 th j 


, 9th, 


10th ... letters beyond. 










■ • • 


• • i 


,.IZN 


FUQGK TIZRG BSATB KOXKT 


IXSC 








• • • 


• • i 


,.0ND 


ITION V/IKEL INESI NYOUR 


AREA 








IZNFU QGKTI 


ZRGBS ATBEO XKTIX SCTTL 


IYPCX 








The 


text is seen tc begin 


with 














IZNFU QGKTI 


ZRGBS etc. 














• 


.... . .OND 


ITION etc. 
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The 2d word of the message is obviously CONDITION. Wien 
G c = Cp ? the lceyletter is E. The introductory keyword ends 
in E, then. By assuming various v. r ord3, when REPORT is tried, 
the keyword OUTLINE is found. The beginning of the text: 

OUTLINE IZN. . . 

REPORTC OND... 

IZNFUQG KTI... 
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10 1. This message represents a case of simple plain-text 

auto-key encipherment with two normal sequences, one direct, the 
other reversed. The usual simple steps having "been tried, without 
success, plain-text auto-keying is assuiaed. Since the initial 
keyletter is unknown, we may assume the first cipher letter of the 
message to he A, B, C, ... and try to huild up text. It happens 
that the first plain-text letter is A, and yields ADYAN for the 
cipher group K X I V N. 

80 2. The following repetitions (and many others) are noted: 

Group No. of Occurrences 



EC 9 

KVHQRMK 2 

KOA 4 

DJZ 4 

DJZMH 6 

TJB 2 

GCZ 3 

GCZBFVIils 2 

ECBFV3B 2 



The large number of repetitions together with non-monoalpha- 
beticity denoted by a frequency table of a few lines of cipher 
text, strongly indicates a plain-text auto-key system. In such 
a system, the plain-text repetitions are one letter longer than 
the cipher-text repetitions. Consider the third and fourth 
lines of cipher text. So many repetitions occur here that we 
can lay off the word lengths with a fair degree of assurance 
that they are correct. Beginning back in the third line, we 
have: 



E C:F G C Z: B E V B B: S K 0 A:G 
E C:J K V HQRMH: NWUGJ ZP3 B:T D J Z:B T J B: 

Colons indicate probable word separations. 
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Now consider the 8 plain-text letters represented "by JKVHQPMH. 
An excellent "probable word" to assume for this is DIVISION. 

Suppose we assume: 

DIVISION to be enciphered by 
JEVHQRMH 

Now if the plain component is standard and if we assume the 
base letter to be Ap, we would have from consideration of letters 
following I : 

x' 

Plain - ABCDEEGHI JKLMNOFQ.RSTUVWXYZ 
Cipher - I M Q V 

That M, Q, and V should fall in such order if something were 
not controlling their positions, would be quite a coincidence, 
particularly as there is just the right number of spaces between 
M and Q for N, 0, and P to be inserted. 

Let us tentatively insert N, 0, and P in place, and then 
slide V c under Ap, in which case Ip = H c . We have: 

Plain - ABCDEEGHIJKLMNOPQRSTUVWXYZ 
Cipher -V I'H MNOPQ 

This position of H is not inconsistent with its occurring in 
the keyword. 

Now the digraph FC c which precedes the cipher equivalents of 
DIVISION, occurs no less than 9 times. This might well then be 
the encipherment of the HEp of THE. If it were, when He is under 
Ap, then C c is under Ep. We would have: 

Plain - AB CDEEGHI JKLMNOP QRSTUVWXYZ 
Cipher ~H C MNOPQ, V I 

This location of C near end of keyword is excellent. Our 
assumptions seem to work out too well to be incorrect. 

Now since the cipher letter following the encipherment of 
DIVISION is N c , the plain-text letter following DIVISION must be 



We have nine letters, perhrp s one word, perhaps several, be- 
ginning with A, following the word DIVISION. The word ARTILLERY 
immediately arises for consideration. 
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Suppose the word ARTILLERY is enciphered by 
NWUGJZPBB 



Setting the I c under Ap, we have Lp a J c 

Plain - ABCDEFGHIJKLMNOPQRSTUVWXYZ 
Cipher -I H C J M N 0 P Q, V 

which is excellent— too good to he wrong. We can also insert 
Ke and L c , a very important addition as we can put L c under Ap 
and use values of Z c ® fp and P c a Ep. We have; 

Plain - ABCDEFGHIJKLMNOPQRSTUVWXYZ 
Cipher -LMNOPQ, V Z I H C JK 



P c checks and Z c 



falls into place. 



How since H and I are in the keyword, G c might well just 
precede J c . If it did, then from encipherment of Ip in ARTILLERY 
to he G c , we would have T c falling in front of He, forming a very 
high frequency digraph. 

Experimentation quickly shows the correct placement of the 
remaining letters and develops the cipher sequence: 



BIRTHDAYCEFGJKLMNOPQSUVVXZ 

The foregoing procedure represents only one of perhaps several 
different lines of attack. Other openings are possible, just as 
in chess or checkers. 



The plain text is: 

HEAVY ENEMY FORCES HAVE BEEN PRESSING OUR DIVISION VIGOROUSLY 
BUT HAVE BEEN STOPPED AT THE BLUE RIVER STOP THE DIVISION ARTILLERY 
WILL MOVE ALL UNITS UP AS CLOSE TO THE RIVER AS PRACTICABLE IN 
ORDER TO BE ABLE TO COVER AS MUCH TERRI TORT ACROSS THE RIVER AS 
POSSIBLE DURING THE COUNTERATTACK WHICH WILL BE MADE WITHIN TWO 
DAYS STOP AMMUNITION DUMPS WILL BE MOVED FORWARD AND SUPPLIES OF 
GASOLINE STORED IN CLOSE PROXIMITY TO THE UNITS IN ORDER THAT NO 
TIME WILL BE LOST WHEN WE BEGIN OUR ADVANCE ACROSS THE RIVER STOP 
PONTOON BRIDGES ACROSS BLUE RIVER WILL BE BUILT AT COSTER AND 
BLUEFIELD BY THE TENTH ENGINEERS TONIGHT. 

10 3. The solution of this message follows along the lines of 

that in Problem 1, since the primary components are now known. 

It is as follows: 
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R E 


P 


E 


R 


E IT C E P 


OUT 


0 


0 


IT B 


R 


I 


D 


Gr E 


S 


A D 


V A 


L 


L 


B 


A V P J X 


A H E 


0 


D 


H 0 


0 


E 


H 


G M 


I 


S E 


V I 


S 


E 


W 


EESCO 


M P L 


E 


T 


E D 














B H 


Q, 


X 


D 


H C V P V 


T H T 


P 


R 


Y J 
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ARMY EXTENSION COURSES 










SOLUTIONS 
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7 


- Running key ciphers. 
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40 




la. Superimposition of the 20 beginnings provides more 






than sufficient material 


for the solution of the first two 1 






or 


three columns. Since 


the cipher alphabets are known^ | 






frequency distributions of columns of the text can be solved j 






quite readily, 


, aided by s 


l study of the repetitions of digraphs 1 






and trigraphs 


appearing within consecutive columns. The key | 






text can be reconstructed simultaneously with the solution of the 1 






cryptographic 


text. Solution is as follows: t 


• 






1 


2 


5 


4 








S 0 M E T 


I M E S T 


H E B E S 


T B 0 0 K 






1. 


BKGWH 


E Z L S I 


F Q P S S 


GYKXS 








R E G I M 


EIIAL 


C 0 M M A 


N D E R S 






2. 


Z 0 C A G 


E K A A B 


HHDUZ 


P M W V W 








TAKEN 


E C E S S 


A R Y S T 


E P S T 0 






S. 


D X Y C P 


EULER 


H N K G E 


Z I Z D K 




• 




P R 0 C E 


E D T 0 C 


A R R Y 0 


U T P L A 






4. 


0 B I S V 


G M J S I 


Q G M E Z 


C N D W G 








ENEMY 


C A V A L 


R Y P A T 


R 0 L S E 






5. 


B KIQC 


P M T H R 


H M H E H 


A T K W R 








R E P 0 R 


T A L L C 


A S U A L 


T I E S T 


• 




6. 


Z H V A P 


H M L Z T 


W W N R A 


F W G B F 








THREE 


B A T T A 


LIONS 


0 F I N F 






7. 


0 0 K X B 


E K L E C 


FQPSS 


G Y K X 0 








SACHS 


ECTOR 


COMMA 


N D E R W 






8. 


B K W K P 


Q T T E R 


H L T Q F 


F W K B G 








R E Q U E 


S T L 0 C 


A T I 0 N 


0 F E N E 






9. 


N X I M M 


P V Q E E 


P I T T H 


C X Z D K 








FRESH 


TROOP 


SWI L L 


R E P L A 






10. 


TrT H I R X 


A B T W P 


G A K A H 


L X T K H 








W H E N W 


I L L W E 


B E R E L 


I E V E D 
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10 

50 









1 










2 






3 








4 






11. 


A 


K 


Z 


B 


C 


E 


I 


R 


N F 




C X 


S 


0 


G 


I W 


0 


R 




S 


E 


N 


D 


R 


E 


E 


N 


F 0 


R 


C E 


M 


E 


N 


T S 


A 


T 


12. 


A 


K 


R A 


G 


P 


P 


Z 


K P 


W 


B B 


N 


z 


L 


Q D 


IC 


T 




S 


E 


V E 


N 


T 


H 


F 


I E 


L 


D A 


R 


T 


I 


L L 


E 


R 


13. 


B 


K 


G 


K 


I 


I 


V 


Q 


R B 


D 


N G 


E 


Z 


L 


N B 


S 


C 




R 


E 


G 


U 


L 


A 


R 


0 


B S 


E 


R V A 


T 


I 


0 N W 


I 


14. 


Z 


H V Q 


Z 


C 


P 


Q 


Y A 


0 


X X 


R 


K 


N 


TI V 


0 


z 




T 


H 


R 


0 


U 


G 


E 


0 


U T 


T 


H E 


N 


I 


G 


H T 


A 


L 


15. 


B 


K 


H A 


c 


E 


Z 


c 


0 V 


T 


K K 


N 
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b. 


The first 


15 letters 


of the running-key 



follows: SOME! IMEST HEBES 

2. By assuming tho presence of the word THE in the key- 
text or the presence of the word BATTALION in the cipher text, 
a start is made in the solution. By working forward and back- 
ward from this initial ontering wedge, solution can be oom- 
pletod in the manner stated in the text. The solution is as 
follows : 
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ARMY EXTENSION COURSES 
SOLUTIONS 



SUBCOURSE - Military Cryptanalysis, Part III 

LESSON 8 - Progressive-alphabet systems. 



Weight ; 

100 1. Other methods of attack ending in failure, all the 

messages are re-written, one under the other. 

By means of the repetition of N M Q 11 Y (mossages 1 and 6) , 

C J T G P (message 1 and lino 4 of message 3), K U T D W (message 
7 and line 6 of message 3),CXCKXC (ends of mossages 1 and 
5), and other repetitions, the messages are all lined up in 
prop or columns. 

Prom the repetition in message 3 of J S I 0 • • • • V M B M 
(lines 1 and 7) at interval of 156, and from other shorter 
repetitions, it is determined that 26 alphabets arc used. 

The mossages are rewritten in lines of 26 letters long, 
using message 3 as a bo.se, and starting the other messages at 
the proper places to bring the repetitions into alignment. 

Frequency tables are made of the lottors in each column of 
the superimposition diagram and the messages solved as a poly- 
alphabetic substitution oip’ner of 26 secondary alphabets, using 
indirect symmetry to assist in determining values and building 
up the primary components. A start is probably most easily made 
in message 3 where the repetitions indicate the lengths of three 
four-letter words in sequence. A guess that these words are 
numbers follows. 

Noting that all the secondary alphabets are reciprocal, this 
fact is found to be of material assistance. All are derived from 
the sequence based on PUGNACITY slid against itself. The 
initial setting of column 1 of message 3 iss 

Plains PUGNACIT YBDEFHJKLMOQRSVWXZ 
Cipher s ZXIVSRQOMLKJHFEDBYI ICANGUP 

Each succeeding secondary alphabet is derived by moving the 
cipher component one place to the right. 
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The messages and plain text follows 
MESSAGE NO. 1 
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MESSAGE NO. 5 (Continued) 
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ARMY EXTENSION COURSES 
SOLUTIONS 



SUBCOURSE - Military Cryptanalysis, Part III. 

LESSON 9 - Theory of Coincidences ; the Kappa -test; general 

solution for cryptograms with long keys. 



Weight: 

85 1. By applying the K-test, it is found that the three cryptograms 

should he superimposed thus : 

(1) KDGIOJTPLOSKWAP... 

(2) BPDINIIJWLI... 

(3) CHUVOXBD... 

The data for all tests are shown below: 

Relative Relative 



Sett 

Message 

#1 

(504) 


ings 

Message 

#2 

(485) 


Coinci- 

dences 


No. of 
Compari- 
sons 


Settings 
Message Message 
#1 #2 


Coinci- 

dences 


No* of 
Compare ~ 
sons 


1 


1 


16 


485 


1 


1 


16 


485 


1 


2 


17 


484 
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18 


tt 


1 


3 


20 


483 


3 
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12 
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16 
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Weights 

Relative 

Settings 

Message Message 
#2 #3 


Coinci- 

dences 


Wo B of 

Comparif 

sons 


Relative 
Settings 
Message Message 
#2 #3 


Coinci- 

dences 


Wo. of 
Compari- 
sons 


1 


1 


15 
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1 


1 


15 
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12 
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text, the value of E(f p) is .0667x35x34 = 79; for random text 
E( £ r ) is .0385x35x34 - 46. The midway point between 79 and 46 
is 62o5. Consequently we may begin by saying that any distribu- 
tion which gives a value for which is 63 or more will tentatively 
be classified as being monoalphabetic ; any distribution which 
gives a value which is below 63 will tentatively be classified as 
being not monoalphabetic. Accordingly, the results of this first 
examination are as follows! 
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60 b. To answer the questions asked we could begin by testing 

only the distributions which were classified under a. above as 
being "surely monoalphabetic", and then add to the data thus ob- 
tained the results of testing the distributions whose classification 



40 
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The § and X tests; ascertaining by statistical 
methods whether a distribution is monoalphabetic 
or polyalphabetio. 



All the distributions have 35 letters each. For plain 
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is indicated as probably correct and then treating the distribu- 
tions whose classification is in doubt. But we might as well 
systematize the work and make all the tests at onoe. Moreover, 
it is possible that the X-test may corroborate or substantiate 
the results obtained from the $. tostj the X-test may even oast 
some doubt upon the accuracy of the results obtained from the 
test in certain cases. Hence, we draw up a diagram as 
follows s 
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Since all the distributions have 35 letters each, the values of 
X for plain text and for random text ares 

Xp = 35 x 35 x .0667 = 81.7075 = 82 

X„ - 35 x 35 x .0385 - 47.1625 = 47 
r 

The midway point between the two values is 64.5. Examining the 
values of X for the various comparisons shown in the diagram above 
we may set down the following reasonings 

Examining the first line in this diagram, we may say that 
distributions 1 and 8 are certainly similar and belong to the 
same monoalphabet (X = 119 ) ; distributions 1 and 7 (X 3 85) most 
probably belong to the same monoalphabet, too, in which case 1 , 

7, and 8 are similar and belong together. If this is correct 
then 7 and 8 when tested against each other should give a high 
value for X. Reference to the tabic shows that X in this case 
equals 87, which corroborates the idea that 1, 7, and 8 belong 
together. Returning to line 1 of the diagram, the values of X 
for distributions 1-9 and 1-10 are 74 and 50, respectively. 
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The first of these values is considerably above the midpoint 
value (64.5) and we may feel that there is good evidence for 
thinking that distribution 9 also belongs to the same mono- 
alphabet with 1, 7, and 8. Furthermore, if 9 does belong with 
1, 7, and 8, then the X values for 7-9, and 8-9 should be high. 

They are 66 and 77, respectively. The value 77 for the combina- 
tion 8-9 is high enough to be considered as substantiating the 
idea that 9 belongs with 1, 7, and 8, but the value for the 
combination 7-9 is pretty low and casts some doubt upon the matter. 
However, let us as sumo tentatively that 1, 7, 8, and 9 belong 
togothor. As for distribution 10, it hardly looks as though it 
belongs with 1, 7, 8, and 9; moreover the X values for 7-10, 

8-10, and 9-10 should be low. They are 65, 53, and 48. Those 

certainly corroborate tho idea that distribution 10 does not be- 

long with 1, 7, 8, and 9. 

Still referring to lino 1 of tho diagram, wo may say that 
distributions 1 and 4, with X s 29, are certainly not alike. But 
wo have already concluded in a. abovo that distribution 4 is 
"suroly not monoalphabotic. " Obviously, if distribution 4 is non 
monoalphabetic it cannot bo similar to distribution 1, which is 

monoalphabetie. Next we consider 1 and 5, with X s 46. Now in 

tho test distribution 5 gave a very high value (108) so that 
thore can be no doubt about its being monoalphabetic. Hence, 
the low value of X, when 1 and 5 aro compared, must be due to a 
dissimilarity in monoalphabeticity , and we conclude that distri- 
butions 1 and 5 belong to different monoalphabots . 

Likewise, as regards distributions 1 and 6 (X = 56) we con- 
clude that they belong to different monoalphabots. Thus we havo 
reached tho conclusion that 1 and 5 are different, and that 1 and 
6 are different. Nov/ look at the value of X for combination 5-6 j 
it is 82, indicating that di stributions 5 and 6 aro similar . 

Wo havo now disposed of those distributions: 

Nos. 1, 7, 8 and 9 belong together 

Nos. 5, 6 " 11 

No. 4 is not monoalphabotic. 

There remain distributions 2, 3, and 10 to bo classified. 

Now 1 and 2 do not go together, since X s 52. But from our 
work under a above, distribution 2 was classified as "probably 
not monoalphabetic." Henco, the X test corroborates that con- 
clusion. This is further substantiated by tho fact that distri- 
bution 2 when tested against all the other distributions (line 2 
of the diagram) shows low X values throughout. So we have dis- 
posed of distribution 2: it is suroly not monoalphabotic and does 
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not belong with either the 1-7-8-9 group or the 5-6 group. 

As for distribution 3, it gives a fairly high value for X 
when tested against distributions 5 and 6 (76 and 81, respectively). 
It also gives a fairly high value when tosted against distribu- 
tion 10 (X ; 78). Do 3, 5, 6, and 10 go together? Note the 
values s 

X for 3-5 a 76 X for 5-6 = 82 

" 3-6 = 81 " 5-10= 88 

" 3-10= 78 " 6-10= 81 

Tho foregoing leaves no doubt that 3, 5, 6, and 10 are similar 
distributions . 

All distributions have now been accounted for, with the 
following conclusions: 

(1) Distributions 1, 3, 5, 7, 8, 9, and 10 are mono- 
alphabetic j 2 and 4 arc not. 

(2) There are but 2 monoalphabets represented among the 
8 distributions which are monoalphabctic. 

(3) Distributions 1, 7, 8, and 9 belong to one of these 
monoalphabets; distributions 3, 5, 6, and 10 belong 
to the other. 
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85 1. It is clear that the mossage involves 26 socondary 

cipher alphabets employed in progression. Transcribing the text 
in lines of 26 letters, a distribution is made of the cipher 
letters with reference to the columns in which they appoar. This 
yields the distribution square which has alroady been furnished. 



By using this distribution square it bocomes possiblo to build 
up the primary cipher component by successively matching pairs of 
distributions, and applying the X-tost. We begin with the D and 
and U distributions j sinco thoy have the most data. The expected 
value of X is s 34x33x.0667 = 74.8. None of the juxtapositions of 
tho two distributions gives a cross-product sum that approximates 
75; tho juxtaposition giving tho greatest value for X is as follows: 



1 

D (1 1230410110023001130411202 
U 0011041021 1003] 014024301022 
Pro- 00230 16 102 1 00650040603201004 
duebs 

Sum of cross-products (X) = 61 
other 



But there are soveral/ juxtapositions which give values closo 
to this, so that it is inadvisable to assume without further 
corroboration that this juxtaposiu Lon is the correct one. 



The next largest distribution is that for Q. This distribu- 
tion is tested against tho I) and the U distributions separately 
and then against tho two distributions combined at tho various 
possible juxtapositions. By such procedure it becomes easy to 
pick out the correct juxtaposition from among soveral possibili- 
ties. 



Tho final result is that tho following sequenco is constructed: 

1 2 3 4 5 6 7 8 9]D111213]415]j6]7]839ffl2L2223a:25 26 
DMXOCLWRBJVSEQTAIUY GPEFNZK 
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The cipher text can now be converted into monoalphabetic 
terms and solved as a monoalphabetic substitution cipher, where- 
upon the plain component can be constructed. It is found to be 
as follows: 

EGPVLFNUMCJSODKTYBI R’X ZAHQI 

These two primary components were derived from the following 
transposition rectangles: 



6 5 3 4 2 1 
Z YMOLE 
A B C D F G 
HI JKNP 
Q R S T U V 
V/ X 



6 4 3 2 1 7 5 
TROKEYS 
ABCDFGH 
I J L MN ? Q 

nwxz 



The solution is as follows: 
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10 2. By "deciphering” the first few letters (that is, setting 

the reconstructed cipher component against the reconstructed 
plain component at any point and converting the cipher letters 
into their plain-component equivalents, sliding the cipher 
component one space to the left each time), and then completing 
the plain-component sequence, the first word of the message is 
found to bo R A D I 0. This gives the correct initial juxta- 
position of the two components and the ontiro message can now 



bo read 


without further 


delay. 


It 


is as 


follows 


‘ • 
’ • 
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The text of this message then shows what must bo done in order 
to read No. 2. When the primary components are interchanged 
and the principle explained above is then applied, tho message 
is found to read as follows: 

(5) A T T A C KBEGI N S A T P I V E A M 
BBIXJ NYLVG CQVVO UPKCA 

5 3. Problem 2 illustrates the grave danger of communicating, by 

radio or any other intercoptiblo agency and especially by moans 
of a current cipher system and cipher key, tho key to a future 
message or set of messages. Curront ciphers and keys should 
never be usod for such a purpose; nor should such information 
be communicated by means suscoptiblo of interception. 
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ARMY EXTENSION COURSES 
SOLUTION 



SUBCOURSE - Military Cryptanalysis, Part III. 

LESSON 12 - The X-test and its application in the solution 

of a practical example involving the matching 
of alphabets. 



Weights 



90 




1. The first step is, of course, to superimpose the 
messages properly. This can readily be done by means of the 
message indicators. Also, since the indicators give the 
various starting points, the number of different indicators 
should correspond with the length of the keyword employed 
by the stations within the net. Only 8 different indicators 
appear and hence it is safe to assume a key of 8 letters. 

The superimposition diagram is shown in Fig. 1. Since there 
are 32 columns we may mark off the varying keying "blocks" 
(i.e., permuted arrangements of the 8-letter cycles) as shown 
at the top of Fig. 1. 



Frequency distributions are then made for the indivi- 
dual columns of the superimposition diagram, beginning with 
column 4 and ending with column 29. (Columns 1-3, 30-32 con- 
tain so few letters they may be neglected.) The distributions 
are shown in Fig. 2. 



The next step is to apply the X-test to these dis- 
tributions for the purpose of combining those which belong to 
the same cipher alphabets, in order to facilitato the analysis 
of the latter. The process is likely to bo a laborious one 
and we prepare a table so as to systematize the work. In this 
table there are pairs of lines, the upper one of each pair 
giving the expected values of X, the lower one the actual values 
for each test. Whenever we find. a case wherein tho actual 
value is high, indicating a possible similarity in the two dis- 
tributions being tested, wo mark it by an asterisk or by under- 
scoring it. The result is shown in Table 1, which forms the 
basis for tho analysis of the data from the X-tests. 

In order to eliminate possible aberrations in frequency 
occasioned by the presence of words repeatedly occurring at 
the beginning of messages, we may start our analysis with 
column 9, the first column in the second cycle of the key. 
Immediately we note tho high value of X for the matching of 
columns 9 and 19 (X - 55, whereas the expected valuo is 42). 
Also, in this same pair of linos we note the value of X for 
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combination 9-29 (X - 36, expected value 25). Let us, then, 
assume that 9, 19, and 29 belong to the same cipher alphabet. 

If 9, 19 and 29 are really similar, then the X-test for the 
combination 19-29 should yield a high value. It is 34, whereas 
the expected value is only 25. Thus we find excellent corro- 
boration for assuming that columns 9, 19 and 29 belong to the 
same cipher alphabet. We may now look for that column among 
columns 1 to 8, inclusive, which belongs with 9, 19 and 29. Of 
course, it may be that column 1, or 2, or 3 belongs in that group 
but if it does we cannot test the idea because these columns con- 
tain so few letters. So we can only start with column 4. The 
matching of columns 4 and 9 gives a close approximation to the 
expected value (X s 15, expected value 17) but the values for 4-19 
and 4-29 are so low as to make it certain that 4 does not belong 
with 9-19-29. Columns 5 and 9 certainly do not belong together. 

But columns 6 and 9 give a high value for X; moreover, the combi- 
nations 6-19 and 6-29 give excellent corroboration for the amal- 
gamation of 6-9-19-29. If this is correct we have isolated from 
among all the 29 columns four which belong in the same cipher 
alphabet; moreover, we have one representative of this alphabet 
in each cycle of the key — which is as it should be. 

Now take column 10. There are several candidatos for combina- 
tion with it, so many, indeed, that we are going to have to be very 
careful. Columns 10-12 give a value of 40; 10-18, a value of 45; 
10-22, a value of 36; columns 10-21, a value of 30. Hone seems to 
bo really outstanding; if we take the combination 10-18 wo cannot 
corroborate its correctness. Lot us, therefore, suspend judgment 
on this column for a few minutes. 

Take column 11; certainly it goos with column 24. Now see how 
good a value the combination 8-11 gives as against 4-11, 5-11, or 
7-11 (column 6 can be passed over since it has already been 
classified with columns 9, 19, 29). Let us assume that 8, 11, and 
24 belong together. Then 8-24 should give a high X-value; it is 
38, not as high as we would like to have it, but not bad, since 
it is only 4 points below tho expected value. However, notice how 
much lower the other values are in this same line of data for the 
combination of column 8 with most of the other columns. For those 
reasons we may rogard it as fairly well established that columns 
8, 11, and 24 belong together; moreover, that the alphabet to 
which they pertain is not represented in the section containing 
columns 25-29. 

Next take column 12. Here is an excellent case presenting no 
difficulty. It obviously goes with columns 18 and 28. Corrobora- 
tion is immediately seen in the high value for the matching of 18 
and 28 (expected value 33, actual 46). Does column 4, or 5, or 7 
belong in this group? Certainly neither 4 nor 7 does; but 5 may. 
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for its value, 23, is quite close to the expected value, 25. 
However, 5 and 14 give a better matflh, so that wo cannot assume 
5 belongs with 12, 18, and 28. Let us be content at this point to 
group only 12, 18, and 28, leaving 5 for further consideration. 

Thus far, we have definitely tied together the following 
columns : 



Group 1: 6-9-19-29 

" 2: 8-11-24 

" 3 j 5-12-18-28 



Looking these over we note that we have allocated several 
columns which are adjacent. Perhaps wo can dispense with further 
X-tests if we have onough data to solve these adjacent columns. 
Specifically we note that columns 5, 6, 8 and 9 fall within the 
three groups of columns definitely combined. Therefore, if wo can 
find, tho group into which column 7 falls we will have 5 adjacent 
columns, with more than enough data in the respective alphabets to 
permit of solution of theso alphabets. Consequently, let us study 
column 7 and see what wo can do with it. 



Certainly column 7 belongs with 17. Columns 15 and 16 with 
values of 64 and 62 respectively also appear to belong in the same 
group with 7 and 17. But there are several more candidates: 
columns 23 (X - 44), 26 (X a 30), 27 (X = 58), and 28 (X = 33). 
Testing columns 15, 16, 23, 26, 27, 28 against column 17, it be- 
comes clear that only columns 15 and 27 belong with 7 and 17. Thus 
wo have again found a group of 4 columns which go together, with a 
representative in each keying block. 

7/e have four groups of alphabets with tho following columns in 
each group: 



Group Is 
" 2 : 
" 3: 

" 4: 



5- 12-18-28 

6- 9-19-29 

7- 15-17-27 

8- 11-24 



Tho respective small distributions are now combined to yield 
four larger distributions which can be solved by recourse to 
principles of frequency and indirect symmetry. Those distributions 
are shown below in Fig. 3 
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5,14, =•- __ =■ _ ^ S~ JS; ~ ^ ~ ~ js =: S 

22,25 A BCDEF G" H I JKLMNOFQRS T U V Vf X Y Z 

Alphabet 1 



6 , 9 , 25 §T = =s __ 

A B I Fi FT n l mTo'p'~q~rTTtjTwx’~y z 

Alphabot 2 



7 ' 15 ' 2 = _ ~ 

17,27 ~ = .=£ If = 5£ s - ^ 5 __ dS _ = _ i£ 

ABCDEFGHIJKLMN'OPQRSTUVWXYZ 

Alphabot 3 




ABCDEF G H I JKLMNOPQRS TUVWXYZ 



Alphabet 4 




Obviously in alphabet 3, E 0 - Ep. The repeated pentagraph 
E B D K K in messages 23 and 24, beginning with Ep certainly seems 
to be E N E M Y, with D c in column 9 (alphabet 2) equalling Ep, 
which is corroborated nicely by the frequency of D c in that 
alphabet. Also, B c in alphabet 4 is Np and the frequency of B is 
excellent. Once an entering wedge of this kind has been forced 
into the problem, the rest follows without difficulty. 

A reconstruction diagram for the recovery of the cipher com- 
ponent is drawn up and the following sequence is reconstructed: 
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HA JV OBLWS CPXGHUIF IKEEZMDQY 



which is seen, to he derived from the key NO SMOKING: 

5-6-7-4-3-2-1 
N 0 S M K I G 
A B C D E F H 
JLPQSIU 
V W X Y Z 

The plain component is then quickly recovered: ' 

Plain comp: NPAMS CQTFUVGWYKEHXIDRLJZ OB 

which is seen to he derived from the key POSITIVELY: 

5-4-6-2-7-8-1-3-9 

POSITVELY 

ABCDFGHJK 

MNQRUWXZ 

The keyword for the unit whose messages have been solved is 
CONSIDER. 



The letter-for-letter solution of the messages is as follovra: 
12345678 9 30 HE 33 34 15 16 17 38 39 2) 21 22 23 24 2526 27 2829 
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Cycle or 
"Keying Block" 
Column — 



1 2 3 4 5 6 7 8 9 DIL32]334]51617]8]92DZL£2Sa25S272B29 



YTXQIVBWJTFUHARDEODXTNGCC 
YTZZZJTLPMYKLFLDQCPIBIGVZ 
YHXDKAEY PUY GMJDS J JNXDJEGR 
UHSIPYDEIPKUYLEDC JIAKUNJD 
FTVXLBAWBBCS GXCCJIHSZNZJO 
HGLWRSWBYAJ QOEKFIMRZFXUETJ 
QFNEEGWFRHZJAGGHNCRSXCSSA 
HICYKNIFACHJJQIPIMVS COZ IC 
HKFYRPKSVXKXXJRVYHSZLBISDC 
HIEMSDI GMLREDEUKWPKERFZSE 
SJECQMYXCASEECAESFSYIXOKJ 
GQEBHTBWCCISXALMOTTNKOKHTJE 
AJELPCEACJDYLRHN1Z1BXDMRD 
GQEBPKRUVBLEXULCFOCYYPSQCP 
GQEYDTY C I I CT OHPXSWCDRGVMI 
JEXTWY CKGEEXWXYI CNRJ GUMSF 
JEXT OCABI CTWDDXSJNDQES JLB 
JEKDCRRPIlfLOYXPORDEPS OADB 
GEBAMZUHIWSOALPCKEFIPCCCK 
JEHDCY GXXXTBMJHNRZ LFT OCLE 
XZJ ORDVHHNEQPEMIHYIQEGKVI 
EBDKIKPOEEUHI YEHRNJEEY JHE 
EBDKKMBWMUY CJ QDKHRESSAJ CJ 
WJ OKKRREZDWI CHYDRRYEJLBMZ 
VWERUZIQZXKTKFQDGRJWEDBER 
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FIGURE 2 



Column N 

4 abcd’efgh’ijklm'hop'qrst'uvwxy'z’io 



5 ABCDEFGHIJKLMNOPQRS TUVVfXYZ 15 




6 ABCDEFGHIJKLMNOPQRSTUVWXYZ 20 




ABCDEFGH 



JKLMNOPQRSTUVWXYZ 23 



8 



A B 



DEF G h’i J'KL'mNOPQRS TUVWXYZ 25 



AB CDEF GHI JKLME OPQRS TUVWXY Z 25 
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24 AB CDEF GHI JKLMNOPQRSTUV7iT 



X Y Z 25 



25ABCDEF GHIJKLMNOPQR's 



T U V W X Y Z 25 
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7ABCDEF GHIJKLMNOPQRSTUVWX 



Y Z 21 



28 AB CDEFGHI JKLMN OPQRSTUVWX 



Y Z 20 
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3 Column 5 

2 N' 15 

4 JJ ( 10 

10 / 1 



6 7 8 9 10 11 

20 23 25 

13 15 17 17 17 17 
8 1 11 15 3 1 



12 13 14 15 16 17 18 19 20 21 22 23 24 25 



17 17 17 17 17 17 17 17 17 17 17 17 17 17 
1 9 6 9 13 6 6 11 16 15 8 19 8 6 



26 27 
22 2 1 

15 14 
6 6 



28 29 
20 15 

13 10 
0 3 



19 23 25 25 26 25 
7 1 5 8 21 15 



25 25 25 25 25 25 25 25 25 25 25 25 25 25 22 21 19 15 
23 10 28 10 7 5 16 11 19 10 21 14 14 16 18 9 9 6 



31 33 33 33 33 
16 6 34 4 6 

39 39 39 39 
18 4 24 21 



33 33 33 33 33 33 33 33 33 33 33 33 33 33 29 28 27 20 

8 15 29 32 !7 32 i9 40 18 7 22 11 12 34 24 9 25 27 

39 39 39 39 39 39 39 39 39 39 39 39 39 39 34 32 31 23 

7 7 3 64 62 80 4 7 19 6 5 44 11 16 30 58 33 17 



42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 37 35 33 25 

14 15 46 23 37 22 24 18 23 20 21 19 23 23 21 38 14 12 12 10 12 

42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 37 35 33 25 

10 7 15 12 18 28 35 23 18 55 17 31 12 31 19 23 27 13 13 36 

42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 37 35 33 25 

15 « 26 29 24 17 22 45 17 29 30 36 13 14 25 11 30 29 11 

42 42 42 42 42 42 42 42 42 42 42 42 42 42 37 35 33 25 

38 24 23 9 5 11 22 10 7 16 45 15 56 27 13 5 20 6 

42 42 42 42 42 42 42 42 42 42 42 42 42 37 35 33 25 

30 22 14 11 13 48 11 13 16 34 17 31 10 19 11 41 10 

42 42 42 42 42 42 42 42 42 42 42 42 37 35 33 25 

26 25 15 18 40 24 39 27 22 24 32 28 10 12 34 13 

42 42 42 42 42 42 42 42 42 42 42 37 35 33 25 

22 16 17 29 32 40 20 39 17 25 46 18 17 21 17 

42 42 42 42 42 42 42 42 42 42 37 35 33 25 

35 48 27 31 26 19 19 33 22 27 25 31 26 29 

42 42 42 42 42 42 42 42 42 37 35 33 25 

41 11 24 20 31 13 46 13 18 40 38 15 22 



6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 



Solution 

Military Cryptanalysis, Part III, 12."p„ll, 1938 



Column 



REF ID : A60198 






- ** 



TABLE 1 (Continued) 



Column 5 6 7 8 

H'lS 20 23 25 



9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 

22 21 20 15 



17 


25 1 


42 42 42 42 42 


42 


42 42 


37 


35 


33 25 




K 


19 24 25 13 13 


27 


18 29 


26 


39 


23 21 


18 


25 ^ 


42 42 42 42 


42 


42 42 


37 


35 


33 25 


16 24 26 32 


21 


29 26 


13 


20 


46 14 


19 


25 £ 


42 42 42 


42 


42 42 


37 


35 


33 25 


55 22 21 


17 


16 35 


18 


7 


12 34 


20 


25 1 


42 42 


42 


42 42 


37 


35 


33 25 


24 27 


23 


23 42 


12 


17 


15 11 


21 


25 { 


42 


42 


42 42 


37 


35 


33 25 


14 


33 


17 19 


25 


35 


19 14 


► 


L 

y 




■ r " ~ 










22 


25 j 




42 


42 42 


37 


35 


33 25 




21 


39 39 


19 


15 


18 14 


23 


25 | 






42 42 


37 


35 


33 25 






29 19 


37 


32 


21 20 




25 { 






42 


37 


35 


33 25 


24 






28 


9 


6 


20 12 




/ 








37 


35 


33 25 


25 


25 | 








17 


19 


21 18 




r 










31 


29 22 


26 


22 \ 










33 


15 18 


1. 


f 












28 21 


K7 


21 l 












17 13 




r 












19 


28 


20 1 












14 



5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 



Solution 

Military Cryptanalysis, Part III, 12.-pol2, 1938 




